Bryan J. Smith wrote:
Rodrigo Barbosa rodrigob@suespammers.org wrote:
Having /etc readonly is kind of tricky. Are you sure that is a good idea ?
That was my exact thought as well. You can separate out everything except /etc, which really needs to be on /.
Ideally any programs/services should not be automatically writing to /etc (but /var or /srv instead), but that's hardly the reality.
It is not impossible. Debian is very near to being able to do this and it is possible on Gentoo with some simple modifications.