pci scans

[Neil Watson]

I have a client who has over a thousand UNIX hosts of various flavours.
When I started they were paying for audits and then manually fixing
them.  Naturally the hosts were out of control.  I pitched Cfengine to
them.  They were afraid that having Cfengine automatically fix all hosts
at the same time might be dangerous since they were not confident of
their state.

Instead, we created a Cfengine policy that wrote reports of what was out
of compliance.  The reports were then dealt with by hand.  Over time
with experience the client gained confidence about which parts of the
policy could be made automatic.  This continues to this day.

-- 
Neil Watson
Linux/UNIX Consultant
http://watson-wilson.ca
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists