Adapting a patch from Michael Prokop <mika@grml.org> to set all harddisk devices to read-only mode for forensics investigations.

1 files changed, 6 insertions, 0 deletions

diff --git a/hooks/live b/hooks/live
index a940846..aa7b020 100755
--- a/hooks/live
+++ b/hooks/live
@@ -174,6 +174,12 @@ then
 	copy_exec /usr/bin/wget /bin
 fi
 
+# Program: blockdev
+if [ -x /sbin/blockdev ]
+then
+	copy_exec /sbin/blockdev /sbin
+fi
+
 # FUSE kernel module
 manual_add_modules fuse