Thanks to everyone for the feedback. The biggest criticism to this approach has been that /var is not encrypted. My practice of only encrypting /home and using rc.local to setup /home at boot would not seem to work for /var as /var is needed long before rc.local is executed. Is anyone using vnconfig to encrypt /var on laptops? How do you bring this up at boot time and shutdown in an orderly fashion?
Thanks, Brad
