"That's why our IT dept has to vet every update now; some of them break your machine." Uh, what? That's what your IT dept should have been doing from day one. A

"That's why our IT dept has to vet every update now; some of them break your machine." Uh, what? That's what your IT dept should have been doing from day one. Are they also in the habit of just immediately applying kernel updates on production boxes?