CasperSecurity
# --------------------------------------------------------------------
# 1st column: Mount point
# 2nd column: Path relative to root of persistent storage (or auto)
# 3rd column: type => persistent|synced|temporary
# 4th column: action => none|transition (transition requires persistent)
# 5th column: mount flags
#
# See writable-paths(5) for full details.
# --------------------------------------------------------------------
/home user-data persistent transition none
/snap auto persistent none x-initrd.mount
# snappy security policy, etc
/var/lib/snapd auto persistent transition x-initrd.mount
# snap catalogue (sections, pkgnames)
/var/cache/snapd auto persistent transition none
# snap data
/var/snap auto persistent transition x-initrd.mount
# generic
/media none temporary none defaults
/mnt none temporary none defaults
/root auto persistent transition none
/tmp none temporary none defaults
/var/tmp auto persistent transition none
# etc related
/etc/writable auto persistent transition none
# apparmor
/etc/apparmor.d/cache auto persistent none none
# dbus
/etc/dbus-1 auto persistent transition none
/etc/hosts auto persistent transition none
/etc/iproute2 auto persistent transition none
/etc/modprobe.d auto persistent transition none
/etc/modules-load.d auto persistent transition none
/etc/netplan auto persistent transition none
/etc/network/if-up.d auto persistent transition none
/etc/ssh auto persistent transition none
/etc/sudoers.d auto persistent transition none
# for wireless regulatory things
/etc/default/crda auto persistent transition none
# systemd
/etc/systemd auto persistent transition none
/var/lib/systemd auto persistent transition none
/var/lib/private/systemd auto persistent transition none
# udev
/etc/udev/rules.d auto persistent transition none
/var/lib/extrausers auto persistent transition none
/var/lib/misc auto persistent transition none
/var/lib/sudo auto temporary none defaults,mode=0700
/var/log auto persistent transition none
/var/lib/console-conf auto persistent transition none
/var/cache/apparmor auto persistent transition none
/var/lib/apparmor auto persistent transition none
/var/lib/dbus auto persistent none none
/var/lib/dhcp auto persistent none none
/var/lib/dhcpcd auto persistent transition none
# cloud-init
/etc/cloud auto persistent transition none
/var/lib/cloud auto persistent none none
/var/lib/waagent auto persistent none none
# for various clouds like GCE
/etc/sysctl.d auto persistent transition none
# swapfile
/etc/default/swapfile auto persistent transition none
# allow system wide proxy setting
/etc/environment auto persistent transition none
/etc/machine-id auto persistent transition none
# make motd.d and update-motd.d writable for branding purposes
/etc/motd.d auto persistent transition none
/etc/update-motd.d auto persistent transition none
# allow to update password policy
/etc/security/pwquality.conf auto persistent transition none
# polkit
/etc/polkit-1/actions auto persistent none none
/etc/polkit-1/rules.d auto persistent none none