0

With GRUB we can put our system/home/swap/etc. in an encrypted VG that's ok!
But: the /boot is not encrypted, because only GRUB2 can do full encryption.
So even If we regurarly check the files in /boot with sha256 (if their modified then check the logs-> were there an update or no?) there could...