Quote:
Quote:
Some good points there, will give them a try.

I'd still like to put some things in a ramdisk, suggestions anyone? Was hoping Mark might have some ideas.


Sure. Remount the root filesystem as read-only, and then wait for programs to complain. Whatever they're writing belongs on a tmpfs (or f/s on top of a ramdisk, for the old-fashioned).



Actually, what I would really do is just add a little bit of code in the kernel to the sys_open() handler, and have it log the process id/name each time that a program opens a file for RDWR/WRONLY access. Then go after the offenders it identifies and ensure those files end up in RAM.

Once all of that is working, just have the root filesystem always mounted R/O by default.

Cheers