How to enforce read-only root file system using PSS?

[bittracer]

Describe the problem

According to the documentation provided in the AWS EKS Best Practices, it is suggested that we can enforce a read-only root file system on images using Pod Security Standards (PSS). However, I could not find any corresponding details in the Kubernetes Pod Security Standards documentation. Could you help clarify this discrepancy?

[bittracer]

Any help here is really appreciated.