Resumen de Managing network security with cfengine, part 2
The point of cfengine is normally to have one global configuration for every host. This needs to be distributed somehow, which means that hosts must collect this file from a remote server. This in turn means that you must trust the host, which has the master copy of the cfengine configuration file.
