Make root partition mounted as read-only

Last step of making root partition as read-only, on every profile in-
cluding mobile, tv, wearable, common. It will make root partition more
secure and stable, updatable.

Change-Id: If68d8b191d0eea24fc17e762bbcec2a5334424e4

diff --git a/etc/fstab b/etc/fstab
index 10f78254e74cdcc39a109e9f8848e655a03ae789..266fe0f49429c0a0241ea1ab03512aadf4d67948 100644 (file)
--- a/etc/fstab
+++ b/etc/fstab
@@ -1,4 +1,4 @@
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-LABEL=system-data /opt          ext4    defaults,noatime 0      2
-LABEL=user      /opt/usr        ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+LABEL=system-data /opt          ext4    defaults,noatime    0      2
+LABEL=user      /opt/usr        ext4    defaults,noatime    0      2

diff --git a/etc/fstab_initrd b/etc/fstab_initrd
index 75b6c4b8c74197985ce935d8d74adb8fae4e6b8b..5d9d47bec8ecd9865462003599ef81191295a121 100644 (file)
--- a/etc/fstab_initrd
+++ b/etc/fstab_initrd
@@ -1,7 +1,7 @@
 # In case of using MCD initrd, / and /opt is already mounted by initrd
 # Thus, this patch is temporary files for wearable.
 # Basically, initrd should consider this issue.
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-PARTLABEL=system-data  /opt     ext4    defaults,noatime 0      2
-PARTLABEL=user     /opt/usr     ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+PARTLABEL=system-data  /opt     ext4    defaults,noatime    0      2
+PARTLABEL=user     /opt/usr     ext4    defaults,noatime    0      2

diff --git a/etc/fstab_initrd_lazymnt b/etc/fstab_initrd_lazymnt
index 4c80e4d62000dbdc87eb9c817b65ce7105e7c338..ef71810bb6958c3a00ed7e304df0bc165362faa9 100644 (file)
--- a/etc/fstab_initrd_lazymnt
+++ b/etc/fstab_initrd_lazymnt
@@ -1,6 +1,6 @@
 # In case of using MCD initrd, / and /opt is already mounted by initrd
 # Thus, this patch is temporary files for wearable.
 # Basically, initrd should consider this issue.
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-PARTLABEL=system-data  /opt     ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+PARTLABEL=system-data  /opt     ext4    defaults,noatime    0      2

diff --git a/etc/fstab_lazymnt b/etc/fstab_lazymnt
index 02154dc81430769e3c2755307bf0d21b332fed19..2f335c79200370c6e81db2edbd4ff67827b266c8 100644 (file)
--- a/etc/fstab_lazymnt
+++ b/etc/fstab_lazymnt
@@ -1,3 +1,3 @@
-# <file system> <mount point>   <type>  <options>        <dump> <pass>
-/dev/root       /               ext4    defaults,noatime 0      1
-LABEL=system-data /opt          ext4    defaults,noatime 0      2
+# <file system> <mount point>   <type>  <options>           <dump> <pass>
+/dev/root       /               ext4    defaults,noatime,ro 0      1
+LABEL=system-data /opt          ext4    defaults,noatime    0      2