So, the thread here kind of fell quiet with everything else going on.
It seems clear there's issues to address here before this change might
get approved. Here's my list:
* Try and change the storage format of the signatures to not take up
tons of room. I guess this would be in ima tools and sigul?
* Get rpm updated at least in all Fedora's / active RHEL's to be able to
handle rpms with the signatures. I don't know how likely this is for
rhel7, but 8 and fedora 32 should hopefully not be hard.
* Have a few actual, working policies people can look at and see what
they can do/how this is useful
Any other important ones to add?
kevin