> Can you mount /usr as ro and /usr/share (or as far down the /usr/share > path you list as you feel necessary) as rw?
You must be able to mount /usr ro. Period. /usr/share is for system independent _non-volatile_ data. /var is for volatile data. You may even think about /var/share - but mostly volatile data is system dependent so it makes no sense. -andrej
