3 ms·
/usr/local is not immutable, nor is /usr/share . Also, you could mount / as read-only, and mount the writable parts at different points, or using a UnionFS mou
by einpoklum 5y ago
/usr/local is not immutable, nor is /usr/share .
Also, you could mount / as read-only, and mount the writable parts at different points, or using a UnionFS mount of / .
- LeoPanthera 5y ago> /usr/local is not immutable, nor is /usr/share Not technically, but I've built a number of "appliance" linux systems for clients, and to improve reliability I just make the entire disk read-only with the exception of /home and /var. The few locations outside of /var that sometimes need to be writable (in particular, /media, /mnt, and sometimes /root) can simply be symlinked into /var.