remounting filesystem to read-only breaks rules for symlinks