Yes On Apr 19, 2016 8:26 PM, "Wayne D" wrote: > Ya know, I got to thinking. Couldn't I simply revert to NON-IMMUTABLE, > update, then IMMUTABLE again? It IS a flag is it not? > > chattr +i /path/to/filename > > > On 04/19/2016 06:24 PM, Brian Cluff wrote: > >> Correct, but you have to ask yourself, do you really need updates for a >> box that even if it gets infected can't hold onto an >> infection between loads of the VM. >> >> That being said, getting something like cryptolocker would really suck, >> so you might want to come up with a procedure so that the >> machine gets updated periodically but goes right back to being locked >> down, but if he's only using the system for strictly the bare >> minimum, the likelihood of getting an infection is slim to none. >> >> Brian Cluff >> >> On 04/19/2016 05:04 PM, Wayne D wrote: >> >>> Just so (I) am clear on this: A VM setup this way cannot get winblows >>> updates either... correct? It would literally be frozen in >>> time. >>> >> >> --------------------------------------------------- >> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >> >> --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss >