Mike Cloaked wrote:
If someone could boot the machine into single user mode then they could get in b ut only if they have the luks passphrase. So doing a fully encrypted install is pretty safe in the event the laptop got into the wrong hands. I am not even sure any of the tools currently available would be able to compromise a machine installed that way but no doubt other security experts will comment on that.
By the way if your root partition was not encrypted then someone with physical access to your machine could boot into single user mode and get root access - hence encrypting the root partition is probably the only way to avoid that - unless someone knows a different way in?