[Cialug] Secure Linux System

[Nicolai]

On Tue, Sep 11, 2012 at 06:39:52PM -0500, L. V. Lammert wrote:
> At a meeting and the question arose - how can one build a read/only Linux
> system (i.e. reboot restores the original configuration)?

"reboot restores" implies read-write, but anyway...

Simplest way: a read-only filesystem loads stuff into MFS.  You can use
chflags/chattr to enforce this.  Alternatively, some SCSI drives have a
settable read-only pin.

Nicolai