Binary Authorization for Borg
At Microsoft, we just require all binaries to be signed on production systems. Some systems are configured to block execution 9f unsigned code. Where we can&#x27;t do that, monitoring cuts an immediate sev-2 and wakes us up if any unsigned code is executed.<p>Does Linux not have a way to run only signed ELFs?