Unfortunately I have seen no such tool. I currently get away with just handing them the files themselves. Now if in fact your manager is wanting this...well good luck man.
On a more political note concerning this entire issue.
This may sound passive aggressive but here goes:
90% of the auditors I have encountered are inept.
They have no understanding whatsoever of what they are in fact auditing.
Give them the config files themselves and leave it at that, it is not your job to give UNIX lessons or write stoplight(green,orange,red type things
monitoring tools.
Remember SoX under the guise of increasing corporate culpability for their own actions is in fact a boondoggle to the very industry which caused the Acts creation...Auditing and accounting firms. Ironic eh?
08-30-2007
