On Thu, 2004-04-01 at 13:54, Dave Jones wrote: > On Wed, 2004-03-31 at 23:38, Havoc Pennington wrote: > > > A possibly related discussion; we've been wondering if we can make the > > OS image read-only (mounting it that way, or via selinux). > > If we do this, apt/yum/up2date/rpm will also need smarts to remount rw > when upgrading. Having to do this by hand each time would annoy the hell > out of me enough to just make it permanently rw again. That's trivial to do in apt with a little Lua-script plugged into right slots - check http://laiskiainen.org/apt/lua/remount/ (yes there are error cases it doesn't handle, but hey, it's just a silly example...) - Panu -