diff options
| author | Joey Hess <joey@kitenet.net> | 2014-11-18 17:33:21 -0400 |
|---|---|---|
| committer | Joey Hess <joey@kitenet.net> | 2014-11-18 17:33:21 -0400 |
| commit | 6df64ff653d7dddc7b87d633df0d38d46b19a523 (patch) | |
| tree | 3a2b27905febf873d327263ba2fe0d14ff6d1ced /doc/security.mdwn | |
| parent | 2fab1a08b4f197874ad6c613f118315ab0d474a3 (diff) | |
| parent | eaa460c04bfa65f566693c9262c591890d506725 (diff) | |
Merge branch 'joeyconfig'
Diffstat (limited to 'doc/security.mdwn')
| -rw-r--r-- | doc/security.mdwn | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/security.mdwn b/doc/security.mdwn index fb174cb7..7edf25d1 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -1,5 +1,6 @@ Propellor's security model is that the hosts it's used to deploy are -untrusted, and that the central git repository server is untrusted too. +untrusted, and that the central git repository server, if any, +is untrusted too. The only trusted machine is the laptop where you run `propellor --spin` to connect to a remote host. And that one only because you have a ssh key |