diff --git a/sock-shop/catalogue-db.yaml b/sock-shop/catalogue-db.yaml
index 727e46c..d2a319e 100644
--- a/sock-shop/catalogue-db.yaml
+++ b/sock-shop/catalogue-db.yaml
@@ -35,6 +35,8 @@ spec:
           containerPort: 3306
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+
 ---
 apiVersion: v1 # Service - catalogue-db
 kind: Service