Read-Only or Live Bootable Operating Systems

You may be concerned about users creating or moving files to places in the filesystem where you would rather they did not write to. Permissions can help here, but an even more direct way to prevent such writes would be to mount filesystems in read-only mode whenever possible. The other way to preserve an operating system is to store it on read-only media such as a DVD.

A number of Linux distributions allow you to boot directly from USB stick, CD, or DVD. This includes some distributions that have a trial system that you can run a graphical installer from as they boot to a fully functional desktop environment. Linux Mint and some of the Arch Linux distributions work like this. After you have the system ...

Get Security Strategies in Linux Platforms and Applications, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.