We need to have a clear report of the applications/services/platform components creating security infringements (this is related to "running as non-root").

For this, it would be appreciated to have a specific "security report" posted along with test results.

Typically, creating a report with ' journalctl | grep "audit:" ' at the end of the tests could be a good start (to be refined).