Session save in lockdown-mode fixed and improved
I posted that lockdown-mode fixed for overlayfs:
- Lockdown mode fixed for overlayfs — September 26, 2025
However, saving while in lockdown-mode is broken.
Normally, you might not want to save anyway. Lockdown has two modes; #1 runs in RAM with all drive partitions unmounted, #2 completely disables the drives.
Saving is possible in #1, just click on the working-partition to
mount it, then click the desktop "save" icon. #1 is not really
secure; #2 is the main guy...
However, in #2, if have booted off a usb-stick, if it is
physically re-plugged it then becomes available, and the session
can be saved to it.
There is an introduction to lockdown here:
https://easyos.org/user/ultra-secure-web-browsing.html
It has been a few years since I looked at lockdown-mode, and it needs some TLC. First, I fixed saving.
Then looked at some details. If you install an application via PKGget, then, say, create a desktop icon, that was not getting saved and next bootup the icon was gone. Also, if switch back to normal bootup, want that icon to still be there. This, and other details, have been fixed.
The scripts that I mostly worked on are /etc/rc.d/rw-merge,
/etc/rc.d/rc.sysinit, /usr/sbin/lockdown-save, and the 'init'
script in the initrd.
Tags: easy