Hello, I use OBSD on a Soekris target, which uses a compact flash.
I want to limit write accesses on the compact flash, so I mounted / read only, with the noatime option. /var is mounted in RAM.
Then, I ran mtree as a simple IDS. I saw that some devices had their modification time updated, for example /dev/ptyp0 when I run some commands on the soekris target via a ssh connexion.
Yes, I could create a mfs partition for /dev, but I think it is too dangerous.
Is there an easy way to tell the kernel to not update modification time ? Thanks for your answers.
