Setting apt to mount partitions read|read-only

["Jeff Bonner" <jeff@integralogic.com>]

The Securing Debian HOWTO makes mention of the possibility that you can
set a partition as read-only, to further protect the various things in
/usr/bin for example.  Then when you apt-get upgrade, you can configure
apt to automagically turn off the read-only while needed, then turn it
back on (facilitating the install of new items).

However, I don't immediately see anything in 'man apt.conf' that tells
how to do it, assuming that's where you control this behavior from.
Does anyone have instructions on how to accomplish this?

Thanks in advance,

Jeff Bonner
Royal Oak MI USA

 PGP Key ID = 0x25ED7C88
Fingerprint = 1E3F 468D 8AA2 37A9 DEA4  4343 7866 55E9 25ED 7C88