diff --git a/mkosi.extra/usr/bin/_kdeos-rebuild-efi b/mkosi.extra/usr/bin/_kdeos-rebuild-efi
index f6b76df..16883d2 100755
--- a/mkosi.extra/usr/bin/_kdeos-rebuild-efi
+++ b/mkosi.extra/usr/bin/_kdeos-rebuild-efi
@@ -20,7 +20,7 @@ FILES=()
 HOOKS=(base systemd autodetect modconf kms keyboard block sd-encrypt filesystems fsck systemd-extension plymouth)
 EOF
 
-echo "native ro rootflags=subvol=@kdeos_$IMAGE_VERSION systemd.volatile=overlay systemd.firstboot=false systemd.hostname=kdeos kdeos.live=1 \
+echo "native rw rootflags=subvol=@kdeos_$IMAGE_VERSION systemd.volatile=overlay systemd.firstboot=false systemd.hostname=kdeos kdeos.live=1 \
   lsm=landlock,lockdown,yama,integrity,apparmor,bpf \
   rd.systemd.debug_shell=on systemd.debug_shell=on SYSTEMD_SULOGIN_FORCE=1 \
   console=ttyS0 console=tty0 \
@@ -34,7 +34,7 @@ ukify build \
   --output live.efi
 
 # lsm= defaulting to apparmor from https://wiki.archlinux.org/title/AppArmor
-echo "native ro rootflags=subvol=@kdeos_$IMAGE_VERSION \
+echo "native rw rootflags=subvol=@kdeos_$IMAGE_VERSION \
   lsm=landlock,lockdown,yama,integrity,apparmor,bpf \
   rd.systemd.debug_shell=on systemd.debug_shell=on SYSTEMD_SULOGIN_FORCE=1 \
   console=ttyS0 console=tty0 \