There is a huge gap between what's available for Linux (ie the Android and ChromeOS boot systems), and what the mainstream Linux distributions actually implement.
On the whole, the distros do a terrible job. If you can modify the initrd (which you can on all of them by default), it's game over.
And that's just secure boot. Linux has no real equivalent to TCC, for example.
On the whole, the distros do a terrible job. If you can modify the initrd (which you can on all of them by default), it's game over.
And that's just secure boot. Linux has no real equivalent to TCC, for example.