On Tue, 2021-01-05 at 13:05 -0500, Ben Cotton wrote:
https://fedoraproject.org/wiki/Changes/Signed_RPM_Contents
Note that this change was submitted after the deadline, but since it can be shipped in an complete state, I am still processing it for Fedora 34.
== Summary == We want to add signatures to individual files that are part of shipped RPMs. These signatures will use the Linux IMA (Integrity Measurement Architecture) scheme, which means they can be used to enforce runtime policies to ensure execution of only trusted files.
Is there any relation between this and fapolicyd, that seems to be developed mostly by Red Hat employees?
https://github.com/linux-application-whitelisting/fapolicyd