If the user knows that other people will repeatedly have physical access to her notebook - running Linux - while she is absent, and that there is no way around this, what are best practices for protection?
The obvious one is to lock the login screen - ok. Still not sure how to protect from live CDs, live USBs and most of all, hardware modifications, such as inserting physical keyloggers in the machine.
As to this last case one can verify after it potentially happened but any creative idea on how to prevent it in first place? Maybe some special locker, tape or what-not?