> If possible, put /usr and / on read only media (CDROM, or a ZIP with
> hardware write protection).

Zip disks have hardware write protection?  How?  (I know it's possible
to write-lock a disk, but AFAIK only in ways that can be unlocked by
software, and hence border on useless for these purposes; also, last I
checked, the interface to locking and unlocking is undocumented - has
this changed?)

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B