No, we have address space randomization and hash table randomization since those happen at runtime. /dev/random works as you'd expect. The immutability is just

No, we have address space randomization and hash table randomization since those happen at runtime. /dev/random works as you'd expect. The immutability is just at build time. So chrome and firefox aren't able to seed a unique ID in the binaries like you might be accustomed to. Funny story, we had a python dependency that would try to update itself when you imported it. I noticed because it would raise an exception when it was on a read only mount.