3 ms·

The kernel already has support for verifying signatures on binaries - check out IMA appraisal.

• dcow 9y ago
  Apropos: https://lwn.net/Articles/488906/ https://lwn.net/Articles/488906/ Hmm does this only apply to files though? I'm talking about kernel signature engorcement on any page mapped into memory.
  • mjg59 9y ago
    No, there's a presumption that any signed app isn't going to generate untrusted code
    • dcow 9y ago
      Thinking about it more that seems fair enough provided as a user I can operate the system in such a way that I'm only running trusted code.