Installing to flash disk gives you an option to install with an "n" option. Once installed in this manor the drive is protected from any changes, a reboot reverts the drive to just as it was. Now is there a way to change the umask=000 so that the drive can have changes made from time to time but locked down the rest of the time. I have young students that use the notebooks and the write protection is great until I need to add something.
Cisco ASA 5520 Adaptive Security Appliance
$42.56
Check Point L-71 6 Port Gigabit Enterprise Firewall
$34.99
Ubiquiti Networks USG Unifi Security Gateway Router/Firewall
$29.95
NetGate SG-2440 with pfSense Plus Console GNU Router Firewall Security Appliance
$69.99
Fortinet Fortiwifi 60D FG-60D Security Appliance Firewall / VPN w/ AC Adapter
$34.97
Ubiquiti Networks UniFi Security Gateway - White (USG-3P)
$49.00
OPNsense six-port Gigabit router/firewall on Lanner FW-7535 hardware
$69.00
$120.00
Fortinet FortiGate 60F | 10 Gbps Firewall Security Throughput (FG-60F)- Open Box
$381.99