Ask HN: Does your org disallow sudo on your dev machines?

I've had admin-restricted Windows workstations in the past, but my Linux machines have never been locked down for me.

When I started my last job, I did find that they had installed their own root CA and an admin account they could ssh into, but they never said anything when I disabled them.

One company installed a root CA and issued the device with admin locked down...but IT would give a developer permissions just for being a developer, so that was the first thing we had new hires do. If you ran another OS, you had to install their root certs, or the internet was basically unusable.

Another company validated that a few things were installed and running (virus scanner, new enough update level, maybe a couple other things?) to connect to VPN, but otherwise didn't restrict control over their machines.

We use unrestricted Mac's at my company, heck many use their own laptop. But we have very restrict access rules for sensitive information. The majority does not have access to company or user sensitive information. We are trying to strike a good balance between security and just letting people do their job.

no. unless they hire preschoolers.