[ars]

On Linux servers I always uninstall the compiler and dev tools. I actually wrote a little script to dry-run uninstall every single package on the server one by one, and if uninstalling it doesn't remove anything important I'll go ahead an uninstall it.

I'm left with only a bare minimum of stuff, even things like man pages or simple utils I'll uninstall.

[SoftTalker]

If the intruder as gotten far enough to be in a position to run a compiler, he'll just upload it if it isn't there.

[ars]

Maybe, maybe not. Compilers are quite large, especially once you include dev versions of system libraries.

[red-iron-pine]

if you're uploading a compiler you could just upload a binary. unless it's a very specific system you can probably just put it together "at home" and slap it in there.

[ars]

I think you entirely missed my point. Because there is no compiler they have to upload something.

With a compiler they can compile something locally which is easier to do.