A modification to the 4.4 Linux kernel, as well as an extension to the Executable and Linkable Format (ELF), to provide code signing verification and validation on binary execution.
Also includes a small user-land application to generate and embed code signing certificates in said ELF files.