read only

[David Woodhouse]

paonia at home.welcomehome.org said:
> I am not sure how I would update the image then. And also garentee
> that noone else can. 

Presumably, when you wanted to update the image, you'd boot a different 
kernel - one which has full read/write support. You can't _guarantee_ that 
your attacker won't reboot the system onto the same kernel, but it's 
certainly far less likely, and far more detectable.

--
dwmw2




To unsubscribe, send "unsubscribe mtd" to majordomo at infradead.org