I am looking for something similar to what iOS supports. Does it exist in linux?
With a secure boot (based in hardware chain of trust), doesn't it make sense to have signed binaries for security? Actually, if I have an opportunity to do signed binaries or add SElinux policies to all services and contain them as much as possible which one would be a bigger ROI in terms of security?
I am not saying they are used for the same purpose but just at a high level which one would you do first, if one has to prioritize.