Whether to allow editing the boot entries before booting them. It is recommended to set this to false, as it allows gaining root access by passing init=/bin/sh as a kernel parameter.

false

true