I'm currently working for SaaS a company and as part of a security audit we were advised to remove all administrative access from all laptops/end-user pc's for a Principle of Least Permissions.
Is there any MDM/management software for Ubuntu that would allow us to remove root-access to ensure we're less vulnerable to malicious software/control what kind of software is installed?
For our Windows/Mac users this was achieved with relative easy, however we have quite a few developers (in fact, almost all) running Ubuntu. The current proposed solution is:
- Running a VM with admin access for dev work
- Having no admin access on the machine (no root/sudo/nothing)
I'm not a fan of this solution because it means more overhead and would require switching to/from the VM each time I want to check my mail (otherwise what's the use). I already proposed to switch away from Ubuntu entirely to Windows but this was not received with much enthusiasm from both devs and management.