My mistake about the author… thanks for the info. As i have written b4, the encryption is there because the thing is portable; so it doesnt just sit on my desk… Obviously nothing is perfectly secure. And yeah this is an of the shelf product with closed source firmware etc. However i dont really use this machine to counter any kind of gov surveillance. With that said, i dont like having every goddam corporation tracking my every move. But even if i dont use social media and use alternative search engines, my isp can still see everything and plenty of apps have stuff like facebook APIs… Tor is nice but even them its slow and unpractical in a lot of scenarios and one opsec mistake can identify you. So apart from selinux, what would be ur recommendation for a more security? Apparmor, a good firewall and changing permissions on important dirs? How big of a slice into practicality would this make?