Yes

On Apr 19, 2016 8:26 PM, "Wayne D" <waydavis@centurylink.net> wrote:
Ya know, I got to thinking.  Couldn't I simply revert to NON-IMMUTABLE, update, then IMMUTABLE again?  It IS a flag is it not?

chattr +i /path/to/filename


On 04/19/2016 06:24 PM, Brian Cluff wrote:
Correct, but you have to ask yourself, do you really need updates for a box that even if it gets infected can't hold onto an
infection between loads of the VM.

That being said, getting something like cryptolocker would really suck, so you might want to come up with a procedure so that the
machine gets updated periodically but goes right back to being locked down, but if he's only using the system for strictly the bare
minimum, the likelihood of getting an infection is slim to none.

Brian Cluff

On 04/19/2016 05:04 PM, Wayne D wrote:
Just so (I) am clear on this:  A VM setup this way cannot get winblows updates either... correct?  It would literally be frozen in
time.

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
To subscribe, unsubscribe, or to change your mail settings:
http://lists.phxlinux.org/mailman/listinfo/plug-discuss