Lilo security options

[Craig McPherson]

I spent a while playing around with the Lilo security options, but couldn't manage to accomplish quite what I was trying to.

This is what I'm trying to do:

1. Have one label that anyone can boot into without the password, but that prompts for the password if someone tries to pass an argument to it.

2. Have another label that nobody can boot into at all without being prompted for the password.

I played around with the "Restricted" and "Password" options, but never could get them to do quite what I intended. What would the relevant lilo.conf entries need to look like?

[ironhd]

I think you may be stuck with either/ or.
I ain't seen any docs on that. Not that it ain't impossible...
Would be interested to hear if you find otherwise.

[Linuxcool]

OK. Now this is just a wild guess. No guarantee and I never tried it.

boot = /dev/hda
install = /boot/boot.b
map = /boot/map
prompt
timeout=50
image = /boot/vmlinuz
root = /dev/hda1
label = safe
read-only
image = /boot/vmlinuz
root =/dev/hda1
label = test1
password = whatever1
read-only
image = /boot/vmlinuz
root =/dev/hda1
label = test2
restricted = whatever2
read-only


The safe label is to make sure you can get in if this isn't right. Of course if this works, you'll want to get rid of safe's stanza:
image = /boot/vmlinuz
root = /dev/hda1
label = safe
read-only