LXer: Executing Signed Binaries in Linux Kernel
 

Published at LXer:

This tutorial is the second in a two-part series on locking your Linux machines down to streamline the associated support and administration processes. In this tutorial, you learn how to configure the Linux kernel to execute only signed binaries. This tutorial expands on the groundwork laid in Part 1, which gave some good reasons for keeping Linux's propensity for customization under control and took the first cautious steps toward locking down a standard Linux distribution to prevent spurious user changes to the baseline installation.

Read More...