Linux lacks any equivalent of Apple's code signing and entitlements system, and as the kernel devs point out that leads to problems with making a proper kernel

Linux lacks any equivalent of Apple's code signing and entitlements system, and as the kernel devs point out that leads to problems with making a proper kernel IPC system. The right fix would have been to do what Apple did and work out a namespaced and extensible system for capabilities/entitlements, but they never did it.