Add example /etc/grml/forensic.conf

[crass]

I didn't find the documentation (if there is any) on exempting devices from being set read-only in forensic mode. And I found it annoying that had to find and peruse the udev script that implements that to find out that grml looks for /etc/grml/forensic.conf and will except devices from being set read-only by setting the READONLY_IGNORE variable. I think it might save others time by including an example forensic.conf with some documentation in it. Here would be a super simple version:

# Uncomment to completely disable setting new block devices to read-only.
#READONLY_MODE=disable

# A space separated list of devices for which they and dependant devices will not be marked read-only.
#READONLY_IGNORE="/dev/sdc"

[mika]

Thanks for suggesting this, we can certainly look into this. Nowadays I'm a bit more careful about pre-shipping configuration files within /etc/, though maybe providing this as example configuration within /usr/share/doc/... is a good idea.