I don’t think that we (or anyone) really knows what this beast is going to look like. As long as root exists, there will always be individual users that have access to everything down to the power supply. Short of requiring all systems to be C2 compliant or above, there is no way to audit access to SMAT files and the like 100%. Nothing I’ve seen is more than a band-aid on this unworkable and unreasonable requirement. So, we’ll need to wait and see how this “item” is interpreted over time. My guess is that the need for super-users will be validated in the end.
I also wanted the Colts in the SuperBowl……. 😀
