Hi all,I've got a running debian system on an embedded server. It currently runs off a 2.5" HD, but I'd like to move it off that and onto a CompactFlash disk. So that the drive doesn't burn out, I'd like to use SquashFS to store the root FS read-only and link certain parts of the fs to /dev/shm.
How can I find out what files are opened read/write? Obviously I'll keep /var/log, /var/run, and /tmp on there, but what other portions of the FS are likely to be written to? What changes to the standard startup scripts are necessary to prevent them from remount the root FS read/write?
I've tried using lsof for this, but I'm not sure I can get an easy list from it, including just files and directories, and only those that are opened rw...
Many thanks, ChrisPS: I'm trying to use Debian Sarge with a custom-built 2.6.10/2.6.11 kernel with grsec and other hardware-specific patches.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature