Phil wrote: > > You could have an absolute symbolic link in your read-only /etc to > > a place you know will be read-write, for instance /dev/shm/etc/... > > > > This won't work for files that are used as flags (/etc/nologin) or > even files that are modified by a moving them and creating > new ones. these could be worked around