Re: Any access control mechanism that allow exceptions?

[Jan Engelhardt]

>Hi,
>
>I want to lock down a directory to be read-only, say, /etc, for system
>security. Unfortunately, some valid system tools might need to
>create/modified files like "/etc/dhclient-eth0.conf".  To avoid
>disrupting the normal running of those tools, I might have to allow
>certain files to be created under /etc.

read-only-by-root is not enough?

*mumble* unionfs could help you in part.



Jan Engelhardt
-- 
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/