I have the kernel parameters for our embedded device set during kernel build time, but these can be overridden by passing other parameters from the bootloader.
Is there a way to build a kernel that will ignore parameters that are passed to it?
My justification for wanting this are twofold:
First, it would be nice to isolate kernel things in the kernel "package" to ease distribution of updates. We don't currently use an initramfs, but I suppose it--if embedded in the kernel--could be a point to easily filter incoming parameters.
Second, another layer in our security strategy. It would be a somewhat non-trivial speedbump to either do a binary patch on the existing kernel or build a new one that would successfully boot a custom board; with a secure-boot chain it would be nigh impossible.