Re: Read-only root (/) except /etc
On Sun, Apr 13, 2008 at 03:12:08PM +0000, lists2008@skaro.afraid.org wrote:
> I don't *need* things read-only. I would just rather not *need* to
> have my root filesystem read write.
>
> I gave some reasons above for why I would like to be able to crontrol
> if and when the root filesystem is subject to writes..
However, consider: as things stand now, only root can alter files which
don't have write permissions for others. Sure, if the filesystem were
mounted ro then root couldn't write to the files either (or delete
files). However, root could always remount / rw. Therefore there is no
security in a system once root is compromised whatever you do. If root
is not compromised, then standard unix permission scheme will provide
the security.
Doug.
Reply to: