This article is the follow-up of previous linux workstation setup -- basic setup on lenovo laptop blog post. I’ll try to document (opinionated) steps that should make your laptop more secure for this threat model scenarios:
someone gaining physical access to the laptop software or firmware vulnerabilities software misconfigurations leading to increased attack surface or privilege escalation DISCLAIMER this is just my private opinion and Your Milage May Vary. Feel free to adjust it according to your needs and your threat model.