CloudStack Security

[Giri Prasad]

Hi All,
 Can some please inform, what are the directories, that a typical cloud stack 
management server and cloud agent, writes into or creates files, when 
cloudstack is installed on a fresh linux distro.
 And also, how to make the cloud database as read only, after the installation 
of cs and the creation of different vm's/instances along with their apps.
Thanks & Regards,Giri