Linux can enforce signature checking on all files and make sure only trusted software can be executed, but this requires that the file signatures be packaged, distributed, and installed together with the files. This BoF aims to bring together people working on package management systems to discuss the different methods of including file signatures in software packages.

In this talk we will present how Linux Integrity Measurement Architecture (IMA) on Ubuntu and Fedora can prevent the execution of unsanctioned programs once we have installed the system files with signatures. (slides)