Re:EUD Security Guidance: Ubuntu 18.04 LTS
by wink on Tuesday July 31, 2018 @03:33PM
(#17656312)
Had this exact discussion today :)
party a said: let people read it and be educated
party b said: let's install OpenSCAP[0] and get some reporting
That said, I didn't mean to say "this is awesome, do it like they say" - but I'd definitely liberally use some parts of it if I were to write such a doc for my org. I'm not with BigCos usually so I'm no fan of clamping down root access, etc. I think developers basically need admin access on their machines except at the scale of Google where you have a dedicated force of people just caring for the tooling and that everyone can actually work instead of filing "please install libbzip2" tickets...
party a said: let people read it and be educated
party b said: let's install OpenSCAP[0] and get some reporting
That said, I didn't mean to say "this is awesome, do it like they say" - but I'd definitely liberally use some parts of it if I were to write such a doc for my org. I'm not with BigCos usually so I'm no fan of clamping down root access, etc. I think developers basically need admin access on their machines except at the scale of Google where you have a dedicated force of people just caring for the tooling and that everyone can actually work instead of filing "please install libbzip2" tickets...
[0]: https://www.open-scap.org