X-Git-Url: https://code.delx.au/refind/blobdiff_plain/96e4448844c6f535679f9def29d700b94918d293..849bd62e3cc11418d8645c067dea5ec088b3c30a:/refind.conf-sample diff --git a/refind.conf-sample b/refind.conf-sample index f3c31a4..a1c57b5 100644 --- a/refind.conf-sample +++ b/refind.conf-sample @@ -46,6 +46,7 @@ timeout 20 # Default is "icons". # #icons_dir myicons +#icons_dir icons/snowy # Use a custom title banner instead of the rEFInd icon and name. The file # path is relative to the directory where refind.efi is located. The color @@ -55,6 +56,7 @@ timeout 20 # #banner hostname.bmp #banner mybanner.png +#banner icons/snowy/banner-snowy.png # Specify how to handle banners that aren't exactly the same as the screen # size: @@ -169,6 +171,8 @@ timeout 20 # (see also the windows_recovery_files option) # mok_tool - makes available the Machine Owner Key (MOK) maintenance # tool, MokManager.efi, used on Secure Boot systems +# csr_rotate - adjusts Apple System Integrity Protection (SIP) +# policy. Requires "csr_values" to be set. # about - an "about this program" option # exit - a tag to exit from rEFInd # shutdown - shuts down the computer (a bug causes this to reboot @@ -179,7 +183,7 @@ timeout 20 # netboot - launch the ipxe.efi tool for network (PXE) booting # Default is shell,memtest,gdisk,apple_recovery,windows_recovery,mok_tool,about,shutdown,reboot,firmware # -#showtools shell, gdisk, memtest, mok_tool, about, reboot, exit, firmware +#showtools shell, gdisk, memtest, mok_tool, apple_recovery, windows_recovery, about, reboot, exit, firmware # Boot loaders that can launch a Windows restore or emergency system. # These tend to be OEM-specific. @@ -336,7 +340,8 @@ timeout 20 # - A "+" symbol at the start of the string, which refers to the most # recently booted loader. # - Any substring that corresponds to a portion of the loader's title -# (usually the OS's name or boot loader's path). +# (usually the OS's name, boot loader's path, or a volume or +# filesystem title). # You may also specify multiple selectors by separating them with commas # and enclosing the list in quotes. (The "+" option is only meaningful in # this context.) @@ -368,6 +373,37 @@ timeout 20 # #enable_and_lock_vmx false +# Tell a Mac's EFI that OS X is about to be launched, even when it's not. +# This option causes some Macs to initialize their hardware differently than +# when a third-party OS is launched normally. In some cases (particularly on +# Macs with multiple video cards), using this option can cause hardware to +# work that would not otherwise work. On the other hand, using this option +# when it is not necessary can cause hardware (such as keyboards and mice) to +# become inaccessible. Therefore, you should not enable this option if your +# non-Apple OSes work correctly; enable it only if you have problems with +# some hardware devices. When needed, a value of "10.9" usually works, but +# you can experiment with other values. This feature has no effect on +# non-Apple computers. +# The default is inactive (no OS X spoofing is done). +# +#spoof_osx_version 10.9 + +# Set the CSR values for Apple's System Integrity Protection (SIP) feature. +# Values are one-byte (two-character) hexadecimal numbers. These values +# define which specific security features are enabled. Below are the codes +# for what the values mean. Add them up (in hexadecimal!) to set new values. +# Apple's "csrutil enable" and "csrutil disable" commands set values of 10 +# and 77, respectively. +# CSR_ALLOW_UNTRUSTED_KEXTS 0x01 +# CSR_ALLOW_UNRESTRICTED_FS 0x02 +# CSR_ALLOW_TASK_FOR_PID 0x04 +# CSR_ALLOW_KERNEL_DEBUGGER 0x08 +# CSR_ALLOW_APPLE_INTERNAL 0x10 +# CSR_ALLOW_UNRESTRICTED_DTRACE 0x20 +# CSR_ALLOW_UNRESTRICTED_NVRAM 0x40 +# +#csr_values 10,77 + # Include a secondary configuration file within this one. This secondary # file is loaded as if its options appeared at the point of the "include" # token itself, so if you want to override a setting in the main file, @@ -423,35 +459,35 @@ timeout 20 # of an initial RAM disk. Note uses of Linux-style forward slashes. # Also note that a leading slash is optional in file specifications. menuentry Linux { - icon EFI/refind/icons/os_linux.png - volume 904404F8-B481-440C-A1E3-11A5A954E601 - loader bzImage-3.3.0-rc7 - initrd initrd-3.3.0.img - options "ro root=UUID=5f96cafa-e0a7-4057-b18f-fa709db5b837" - disabled + icon EFI/refind/icons/os_linux.png + volume 904404F8-B481-440C-A1E3-11A5A954E601 + loader bzImage-3.3.0-rc7 + initrd initrd-3.3.0.img + options "ro root=UUID=5f96cafa-e0a7-4057-b18f-fa709db5b837" + disabled } # A sample entry for loading Ubuntu using its standard name for # its GRUB 2 boot loader. Note uses of Linux-style forward slashes menuentry Ubuntu { - loader /EFI/ubuntu/grubx64.efi - icon /EFI/refind/icons/os_linux.png - disabled + loader /EFI/ubuntu/grubx64.efi + icon /EFI/refind/icons/os_linux.png + disabled } # A minimal ELILO entry, which probably offers nothing that # auto-detection can't accomplish. menuentry "ELILO" { - loader \EFI\elilo\elilo.efi - disabled + loader \EFI\elilo\elilo.efi + disabled } # Like the ELILO entry, this one offers nothing that auto-detection # can't do; but you might use it if you want to disable auto-detection # but still boot Windows.... menuentry "Windows 7" { - loader \EFI\Microsoft\Boot\bootmgfw.efi - disabled + loader \EFI\Microsoft\Boot\bootmgfw.efi + disabled } # EFI shells are programs just like boot loaders, and can be @@ -460,10 +496,10 @@ menuentry "Windows 7" { # could initialize hardware and then launch an OS, or it could # do something entirely different. menuentry "Windows via shell script" { - icon \EFI\refind\icons\os_win.png - loader \EFI\tools\shell.efi - options "fs0:\EFI\tools\launch_windows.nsh" - disabled + icon \EFI\refind\icons\os_win.png + loader \EFI\tools\shell.efi + options "fs0:\EFI\tools\launch_windows.nsh" + disabled } # Mac OS is normally detected and run automatically; however, @@ -473,8 +509,8 @@ menuentry "Windows via shell script" { # certainly need to change the "volume" line for this example # to work. menuentry "My Mac OS X" { - icon \EFI\refind\icons\os_mac.png - volume "OS X boot" - loader \System\Library\CoreServices\boot.efi - disabled + icon \EFI\refind\icons\os_mac.png + volume "OS X boot" + loader \System\Library\CoreServices\boot.efi + disabled }