Loopback support in the Linux kernel allows a user to mount a file system image for forensic analysis. Images mounted via loopback can be mounted read-only.