Write Protection

From Kicksecure
Jump to navigation Jump to search
Documentation Previous page: read-only Index page: Documentation Next page: Social Engineering Write Protection

This page explains how to enable write protection for an entire hard disk or for individual files and directories. It also discusses the security implications of these protections.

Write Protection for the Hard Disk[edit]

Write Protection for specific Files or Folders - chattr[edit]

Enable.

chattr +i /path/to/filename

Disable.

chattr -i /path/to/filename

  • Security: Should be reliable at least against the package manager replacing the file, unless package management scripts use chattr, which is very rare.

Security of Write Protection[edit]

To learn more about the technical challenges of write protection, see technical information on write protection and grub-live, Security Considerations

Footnotes[edit]


Documentation Previous page: read-only Index page: Documentation Next page: Social Engineering

Notification image

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 13 year success story and maybe DONATE!