3 ms·
There is a huge gap between what's available for Linux (ie the Android and ChromeOS boot systems), and what the mainstream Linux distributions actually implemen
by bigfatkitten 2y ago
There is a huge gap between what's available for Linux (ie the Android and ChromeOS boot systems), and what the mainstream Linux distributions actually implement.
On the whole, the distros do a terrible job. If you can modify the initrd (which you can on all of them by default), it's game over.
And that's just secure boot. Linux has no real equivalent to TCC, for example.
- nicecars 2y agoI agree. I haven't seen any Linux OS with proper security featuring dm-verity-based Secure Boot (except for documentation in Arch explaining how to implement it). Most distributions cannot be considered security-hardened by default. What do you think is causing this situation?
- bigfatkitten 2y agoI assume lack of priority because it's boring, compared with the shiny features developers tend to care about. There's some promising work happening in Fedora land with unified kernel images, undoubtedly due to demand from Red Hat's corporate and government customers. https://fedoraproject.org/wiki/Changes/Unified_Kernel_Support_Phase_2 https://fedoraproject.org/wiki/Changes/Unified_Kernel_Suppor...