Had this exact discussion today :) party a said: let people read it and be educated party b said: let's install OpenSCAP[0] and get some reporting That said,

Had this exact discussion today :) party a said: let people read it and be educated party b said: let's install OpenSCAP[0] and get some reporting That said, I didn't mean to say "this is awesome, do it like they say" - but I'd definitely liberally use some parts of it if I were to write such a doc for my org. I'm not with BigCos usually so I'm no fan of clamping down root access, etc. I think developers basically need admin access on their machines except at the scale of Google where you have a dedicated force of people just caring for the tooling and that everyone can actually work instead of filing "please install libbzip2" tickets... [0]: https://www.open-scap.org https://www.open-scap.org