Use read-only for bindfs mounts

diff --git a/debian/guest-account.sh b/debian/guest-account.sh
index 6a077baa201f93c1a07d4c0875e32629950c041e..c09d886b0537b083fb6046ff22a9a46e2e6cfdb3 100644 (file)
--- a/debian/guest-account.sh
+++ b/debian/guest-account.sh
@@ -69,7 +69,7 @@ add_account ()
 
       # Wrap ${gs_skel} in a BindFS mount, so that
       # guest account will see itself as the owner of ${gs_skel}'s contents.
-      bindfs -M $USER $gs_skel ${PRE_HOME}/lower || {
+      bindfs -r -M $USER $gs_skel ${PRE_HOME}/lower || {
         rm -rf "$PRE_HOME"
         rm -rf "$HOME"
         exit 1