On: Bypassing Firewalls in macOS Big Sur

[curt15]

>I've not seen anything that does executable validation for linux and actually works.

ChromeOS uses dm-verity to verify the root partition at runtime, similar to Mac OS's signed system volume.

[grishka → curt15]

So does Android. But the executable binaries themselves aren't signed, this only verifies the integrity of the system partition at boot time.