Security considerations

Use a dedicated unprivileged Linux account. Grant only the procfs, sysfs, systemd-manager and device visibility required by selected collectors. Do not use unrestricted root.

The shared helper uses explicit argument vectors, shell=False, captured output, non-raising exit handling and mandatory finite timeouts. Collectors authorize only their documented fixed read-only commands.

Restrict configuration, SOP, state, log, SQLite and JSONL permissions. Avoid symlink ambiguity, keep secrets out of configuration, and protect audit data as operational inventory.

This portal contains static product information only. It cannot execute PANTAW, access node files, query private audit databases, read logs or control systemd.