Installed Caine with Caine From Deb. How should I set /etc/fstab?

[felixdz]

I installed Caine with Caine From Deb.

How should I set the /etc/fstab so as not to write to external media when plugged in?

[slo.sleuth]

That's a complicated answer. The safest way for you to create a read only environment with CAINE is to install CAINE from the boot disk. CAINE uses a mounting scheme that involves several files (primarily /sbin/rebuildfstab) and a udev rule to accomplish read-only mounting.

CAINE from deb is a package to load tools found on the CAINE disc, not to make your existing Linux installation into a forensically sound environment.

If you want to avoid automounting in your existing Linux, assuming you are using the gnome desktop environment, you can launch gconf-editor and uncheck "media_automount" in apps --> nautilus --> preferences. That will stop the device from automounting, but clicking on the device in nautilus will still mount rw. Use the command line to mount read-only.

The best practice, if you are inexperienced, is to install CAINE from the boot disk. If you don't want to do that, then use the CAINE boot disk to create an image of the device you wish to examine, and then examine the image in your own system. Automounting won't matter in that case.