aloz1 on Nostr: nprofile1q…nqkt3 not sure if it's really 'code signing' as such, but Redhat (and ...

nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqfg3u8t8cwppnzfv5jrm6tqhzptzry45t475kwkyt9j99xd5vcjxqynqkt3 (nprofile…qkt3) not sure if it's really 'code signing' as such, but Redhat (and derivatives) now include fapolicyd, which is an allow-list suite. It let's you allow-list by hash and location. I think all binaries & scripts from packages are automatically added to the allow-list. The two together (signed package + allow-list hash) might work as a "signed application" type thing?!