Installing to flash disk gives you an option to install with an "n" option. Once installed in this manor the drive is protected from any changes, a reboot reverts the drive to just as it was. Now is there a way to change the umask=000 so that the drive can have changes made from time to time but locked down the rest of the time. I have young students that use the notebooks and the write protection is great until I need to add something.
Cisco ASA5525-K9 ASA 5525-X Security/Firewall Appliance 1 Year Warranty
$138.00
Cisco FPR2130-NGFW-K9 Firepower 2130 Security Appliance 1 Year Warranty
$3550.00
NetFu Firewall 1U, Intel CPU, 8 x Gigabit, SFP, w/ pfSense, Others, NEW OPTIONS
$541.85
Ubiquiti Networks USG Unifi Security Gateway Router/Firewall
$29.95
SonicWall TZ300 Power Supply Wired Firewall Router Network Security Appliance
$14.50
NetGate SG-2440 with pfSense Plus Console GNU Router Firewall Security Appliance
$69.99
OPNsense six-port Gigabit router/firewall on Lanner FW-7535 hardware
$69.00
Fortinet Fortiwifi 60D FG-60D Security Appliance Firewall / VPN w/ AC Adapter
$34.97
Fortinet FortiGate 60F | 10 Gbps Firewall Security Throughput (FG-60F)- Open Box
$381.99
SonicWall TZ370 Network Security Appliance Firewall (02-SSC-2825)-Open Box
$604.99