Kyle Evans <kev...@freebsd.org> wrote: > > loader: allow for exceptions to restricted settings. > > > > We restrict what an unverified loader.conf etc can set, > > and the same restrictions are applied to interactive input. > > We need to allow for exceptions (eg boot_verbose). > > It is best if any allowed settings match up to '='. > > > > If we do not allow it to be set, do not allow it to be unset > > > > Reviewed by: stevek > > Sponsored by: Juniper Networks, Inc. > > --- > Long-term, we should probably work out something that can work for > lualoader, too. We use setenv() there directly rather than adding a > layer of indirection through the command-line parser.
Ideally this sort of list should be configurable via a .4th or .lua file (verified of course ;-) But if you use setenv directly - that would have to be where the restrictions are implemented? Indirection can solve many problems.
