Exactly what I thought. I've also had to deal with a lot of this 'security'. It really inhibits normal work so much that security is probably reduced. Any ma

Exactly what I thought. I've also had to deal with a lot of this 'security'. It really inhibits normal work so much that security is probably reduced. Any machine should have tcpdump, netcat, lsof, strace as well. If you want to make it more secure - well set permissions appropriately and/or use selinux/apparmor. Hell, may as well put osquery on it as well. Why make life difficult for people to do their jobs? At an interview I was asked how to diagnose a running program. I mentioned strace of course, but they were also looking for gdb use. I've not had gdb on any prod machine for 'security reasons'. :-(