RFD: mount /boot read-only by default?

[Rolf Leggewie]

I am running Jessie Raspbian. Headless. My dos boot partition usually has the dirty bit set after unclean shutdown. This prevents the Pi from booting normally and I have to take the SD card out of the Pi, unset the dirty flag and then reboot. I've now changed /boot to be mounted read-only which I believe should prevent this in the future. Wouldn't this be a better default? Only "downside" is one then has to "sudo mount -o remount,rw /boot/" before updating the kernel. I have /boot mounted ro on my normal computers, too. I suggest to do this.