Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah, it's the same as SELINUX - layers of security.

I could easily see reasons to have a box that can boot a signed kernel but the signing keys are held by me offline.



Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: