Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible to prevent the root user from deleting the kernel?

share|improve this question
up vote 3 down vote accepted

I'm not sure why you'd want to. If it's to prevent accidents, you could protect any file using:

chattr +i /path/to/file

It IS going to cause issues when updating your kernel packages, though and frankly I don't see the point.

You can also mount your /boot partition as read-only and remount it as read-write only when upgrading kernel packages.

If it's because you don't trust people who have 'root' account access, then why would you grant a privilege that effectively allows the person to nuke your systems in 101 different ways to somebody you don't trust?

PS. Granted, there are other solutions that might allow you to define additional authorization methods but those are much more complicated and I don't think your case justifies their use.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.