Re: ifupdown writes to /etc... a bug?

[charlie derr <cderr@simons-rock.edu>]

It seems to me that if the root fs is on a ro medium (like a cd) that 
this is indeed a gain in security.  This would make it impossible for 
you to remount rw wouldn't it?

   ~c



Matt Ryan wrote:

> Explain to me how the ro root makes a difference? There is a lot of talk
> about how difficult it is to install a rootkit when the root fs is ro, but
> if you already have superuser privileges why can't you just remount root rw
> and then drop the rootkit in? If you don't have superuser privilege to do
> this then you can write to root owned directories (with the correct
> permissions) anyway?
> I don't see the win here...
>
>
> Matt.


>