R. Armiento wrote:
Good point. But if you have put everything else that requires write access in separate partitions (eg., /var, /tmp) perhaps one can mount the whole '/' filesystem read-only? I have never tried that, but if you mount /usr read-only to protect your binaries, one would think that you should want to protect your /bin and /sbin binaries in a similar way? //Rickard
If anything, wouldn't /bin & /sbin be more important to be kept ro since this is where all the sys-critical binaries are kept (mount, lsmod, bash, etc) and also less likely to be needed to be written to.