If anybody knows the answers, I have a couple questions on the way knoppix works...

1) when running an executable for the first time since bootup, does knoppix store a copy of the executable in the ramdisk so that subsequent calls to that program will not require rereading off cdrom? If so, how long would the executable files be cached before being deleted to make room?

2) I notice that there are symbolic links in /etc that point to files on cdrom, but when edited, the link is broken and there is an edited copy in /etc.