Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Is it possible to prevent the root user from deleting the kernel?

share|improve this question

1 Answer 1

I'm not sure why you'd want to. If it's to prevent accidents, you could protect any file using:

chattr +i /path/to/file

It IS going to cause issues when updating your kernel packages, though and frankly I don't see the point.

You can also mount your /boot partition as read-only and remount it as read-write only when upgrading kernel packages.

If it's because you don't trust people who have 'root' account access, then why would you grant a privilege that effectively allows the person to nuke your systems in 101 different ways to somebody you don't trust?

PS. Granted, there are other solutions that might allow you to define additional authorization methods but those are much more complicated and I don't think your case justifies their use.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.