Description

For technical and non-technical users alike, maintaining a large installed base of Linux machines can be a harrowing experience for an administrator. Technical users take advantage of Linux's extreme configurability to change everything to their liking, while non-technical users running amok within their own file systems. This tutorial is the second in a two-part series on locking your Linux machines down to streamline the associated support and administration processes. In this tutorial, you learn how to configure the Linux kernel to execute only signed binaries.

Found @ ibm.com