Re: Patching
If they can script using apt then they can script to push / pull rpm databases back to a central server? Or use Chef/ Ansible / puppet or what ever to run compliance reports. It really isn't that complicated for someone with decent scripting skills.