On Thu, Oct 19, 2017 at 8:11 AM, Dmitry Kasatkin <dmitry.kasatkin@xxxxxxxxxx> wrote: > Hi, > > 1. I do not get the idea... > >> ship EVM signatures in packages > > System up and running EVM without hmac? Correct. > How it creates new files without hmac? New files won't have EVM signatures. Appraisal will only be performed on executables that are running in a privileged security context.