set root allocation directory to read only