IMA signed kernel modules

[frezbo]

PoC to see if we can allow users to bring in their public keys that IMA trusts and the kernel modules signed by those:

Ref:

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/kernel_administration_guide/enhancing_security_with_the_kernel_integrity_subsystem
• https://sourceforge.net/p/linux-ima/wiki/Home/
• https://cateee.net/lkddb/web-lkddb/IMA_APPRAISE_REQUIRE_MODULE_SIGS.html
• https://manpages.ubuntu.com/manpages/impish/man1/evmctl.1.html
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/managing_monitoring_and_updating_the_kernel/enhancing-security-with-the-kernel-integrity-subsystem_managing-monitoring-and-updating-the-kernel

[github-actions[bot]]

This issue is stale because it has been open 180 days with no activity. Remove stale label or comment or this will be closed in 7 days.