Whitelist Before Execution

[Jason C. Wells]

Is there a method by which we can check the consistency of an executable 
or library prior to trusting it for execution?  For example, if the file 
doesn't exist in the list of trusted files or the checksums do not match 
then do not allow execution and write a warning message to the log.  I 
could do this manually with existing features like mtree.  It would be 
nice if the system could do it for me.

Later,
Jason