You may limit existing partitions to read only or no-read access by creating an own virtual drive with confined access rights mirroring the original. This can f.i. be used by a virtual machine to safely boot into one or more operating systems that reside on the same disk as your host operating system. Documentation tells you how to use that with qemu or qemu-kvm.