And to add to this list, securelevel = 2 might also be of interest, if you feel you need to tighten it all up.
Den ons 4 mars 2026 kl 11:01 skrev Noth <[email protected]>: > > On Tue, Mar 03, 2026 at 11:16:52PM +0000, Pattled Buquor wrote: > >>>> Does anyone here have some advice/idea/experience on how to do > >>>> immutable systems with OpenBSD? > > > I second that. > > Things that haven't been mentioned but answer some of your questions: > > immutability: https://man.openbsd.org/chflags > > monitoring system files: https://man.openbsd.org/mtree > > Don't use chflags on a production system without testing exactly how you > manage system updates, it will come back to bite you. -- May the most significant bit of your life be positive.
