4 ms·

For regular x86 PCs you can use secure-boot and load your own signing keys, then sign your own linux kernel. As far as I know, chromeos has no option for that.

For regular x86 PCs you can use secure-boot and load your own signing keys, then sign your own linux kernel. As far as I know, chromeos has no option for that. Either it has only google's signing keys, or secure-boot is entirely disabled via devmode. That's clearly a massive step down in security from most modern x86 laptops.

nl 9y ago
Yeah fair call. Although I’ve never met anyone who has actually done that.
fpoling 9y ago
On some Chromebooks via relatively straightforward hardware modification it was possible to install bootloader enabling custom code signing.