[NTLUG:Discuss] Latest on partition encryption

[Chris Cox]

Craig Gill wrote:
> I'm just starting to delve into partition encryption solutions, what
> are some recommendations/pro's/con's from some experienced users?
> For example, encrypting home dir or individual partitions/swap etc.

I do the whole filesystem (could be a partition or LV ... whatever).

You get prompted as the machine boots up (or filesystem gets mounted)
for the passphrase.

If done "right" this way, it's possible the machine is usable even
if the user booting the machine chooses NOT to give a valid passphrase.

But everyone's security policy is different...