Security model

Stub

This page is planned but not written yet. The text below says what it will cover.

What Farhelm exposes and trusts: SSH as the only network path between machines, a web UI that listens only on loopback, no relay or account, and nothing that needs root. Also how much the helm is trusted with on each host, since it can run commands there. The SSH prerequisite for adding a host is in Add a remote host.