This question was asked during an interview with Google and I can't find any answer.
I'm thinking of encrypting your home directory, but if anyone has done it before, i'd appreciate if you can share the knowledge.
This question was asked during an interview with Google and I can't find any answer.
I'm thinking of encrypting your home directory, but if anyone has done it before, i'd appreciate if you can share the knowledge.
AFAIK SELinux gives you full control on what each user is supposed to do on your machine including the root user, removing the privilege of root users to change this access control policies should do the job.
I believe encryption is the only sure way to restrict access to files, since, as you mention, there is nothing preventing someone from physically removing an unencrypted drive and accessing it as root on another computer.