summaryrefslogtreecommitdiff
path: root/doc/security.mdwn
diff options
context:
space:
mode:
authorJoey Hess2014-11-18 17:33:21 -0400
committerJoey Hess2014-11-18 17:33:21 -0400
commit6df64ff653d7dddc7b87d633df0d38d46b19a523 (patch)
tree3a2b27905febf873d327263ba2fe0d14ff6d1ced /doc/security.mdwn
parent2fab1a08b4f197874ad6c613f118315ab0d474a3 (diff)
parenteaa460c04bfa65f566693c9262c591890d506725 (diff)
Merge branch 'joeyconfig'
Diffstat (limited to 'doc/security.mdwn')
-rw-r--r--doc/security.mdwn3
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/security.mdwn b/doc/security.mdwn
index fb174cb7..7edf25d1 100644
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -1,5 +1,6 @@
Propellor's security model is that the hosts it's used to deploy are
-untrusted, and that the central git repository server is untrusted too.
+untrusted, and that the central git repository server, if any,
+is untrusted too.
The only trusted machine is the laptop where you run `propellor --spin`
to connect to a remote host. And that one only because you have a ssh key