I have luks encryption on /home on the netbook - which is what I'm really thinking about.
and then bind mount /tmp and /var/tmp out of /home/tmp /home/var/tmp.I don't understand that bit, I'm afraid.
It takes a government department to lose laptops with unencrypted confidential information :-)
Again, I assumed that it was not possible for an intruder to get as far as swap. If I'm wrong, how can that be encrypted after an install?
Anne