diff --git a/assets/css/bundle.css b/assets/css/bundle.css index 459d00c..5150584 100644 --- a/assets/css/bundle.css +++ b/assets/css/bundle.css @@ -7,6 +7,15 @@ .container{ padding: 0 ; } + +.itemAl_01 a { + color: #f1f8ff; + } + +.itemAl_02 a { + color: #f1f8ff; + } + .al-primary-navbar .container { padding-left: 15px !important; padding-right: 15px !important; diff --git a/content/security.md b/content/security.md new file mode 100644 index 0000000..5e17f01 --- /dev/null +++ b/content/security.md @@ -0,0 +1,6 @@ +--- +title: "security" +type: security +--- + +security content diff --git a/i18n/en.json b/i18n/en.json index 11b56b8..16d48b6 100644 --- a/i18n/en.json +++ b/i18n/en.json @@ -318,5 +318,41 @@ "Since AlmaLinux is ABI compatible with RHEL®, your applications and services should be completely interoperable. You can rapidly migrate any number of servers using the [migration tool](https://github.com/AlmaLinux/almalinux-deploy).": "Since AlmaLinux is ABI compatible with RHEL®, your applications and services should be completely interoperable. You can rapidly migrate any number of servers using the [migration tool](https://github.com/AlmaLinux/almalinux-deploy).", "The Future of AlmaLinux is Bright - AlmaLinux OS Foundation's renewed commitment to our users.": "The Future of AlmaLinux is Bright - AlmaLinux OS Foundation's renewed commitment to our users.", "Build System": "Build System", - "openQA": "openQA" + "openQA": "openQA", + "AlmaLinux OS Foundation publishes Errata to help users to determine what updates such as security issues and fixed bugs are available and their importance based on analysis.": "AlmaLinux OS Foundation publishes Errata to help users to determine what updates such as security issues and fixed bugs are available and their importance based on analysis.", + "AlmaLinux OS provides SCAP and SCAP Workbench packages to audit your AlmaLinux system for security compliance alongside OVAL streams.": "AlmaLinux OS provides SCAP and SCAP Workbench packages to audit your AlmaLinux system for security compliance alongside OVAL streams.", + "AlmaLinux OS has implemented SBOM into AlmaLinux Build System to make the build process more secure and possible to trace.": "AlmaLinux OS has implemented SBOM into AlmaLinux Build System to make the build process more secure and possible to trace.", + "read more": "read more", + "Security": "Security", + "Security Measures": "Security Measures", + "AlmaLinux OS Foundation provides errata to inform users about available updates, including security issues and bug fixes, and their significance through analysis. Users can easily access this information by accessing to our AlmaLinux security advisory portal, known as ": "AlmaLinux OS Foundation provides errata to inform users about available updates, including security issues and bug fixes, and their significance through analysis. Users can easily access this information by accessing to our AlmaLinux security advisory portal, known as ", + "AlmaLinux Errata": "AlmaLinux Errata", + "More details on Errata and how to use it can be found on the ": "More details on Errata and how to use it can be found on the ", + "AlmaLinux Errata wiki page": "AlmaLinux Errata wiki page", + "Additionally, AlmaLinux OS is present in the ": "Additionally, AlmaLinux OS is present in the ", + "OSV database": "OSV database", + "Errata in JSON format for 3rd party software integration:": "Errata in JSON format for 3rd party software integration:", + "errata.full.json for AlmaLinux OS 9": "errata.full.json for AlmaLinux OS 9", + "errata.full.json for AlmaLinux OS 8": "errata.full.json for AlmaLinux OS 8", + "AlmaLinux OS Foundation signs all of its software packages using a GPG signature key, which is verified by default when installing packages via dnf or graphical update tools. If a package is not signed or has an invalid signature, dnf or graphical update tools will warn the user.s will refuse to install it.": "AlmaLinux OS Foundation signs all of its software packages using a GPG signature key, which is verified by default when installing packages via dnf or graphical update tools. If a package is not signed or has an invalid signature, dnf or graphical update tools will warn the user.s will refuse to install it.", + "It’s recommended to verify the signature of a package before you install it.": "It’s recommended to verify the signature of a package before you install it.", + "Location:": "Location:", + "Download:": "Download:", + "To receive security updates and errata, users can sign up for the ": "To receive security updates and errata, users can sign up for the ", + "AlmaLinux Security Mailing List": "AlmaLinux Security Mailing List", + "Subscribing to the list will allow users to stay informed and updated on any security fixes as soon as they are available.": "Subscribing to the list will allow users to stay informed and updated on any security fixes as soon as they are available.", + "The Security Content Automation Protocol (SCAP) automates vulnerability management, measurement, and policy compliance evaluation of systems. AlmaLinux OS offers an OpenSCAP Guide that instructs on how to use the OpenSCAP and SCAP Workbench to audit your AlmaLinux system security compliance.": "The Security Content Automation Protocol (SCAP) automates vulnerability management, measurement, and policy compliance evaluation of systems. AlmaLinux OS offers an OpenSCAP Guide that instructs on how to use the OpenSCAP and SCAP Workbench to audit your AlmaLinux system security compliance.", + "OpenSCAP Guide for AlmaLinux OS 9": "OpenSCAP Guide for AlmaLinux OS 9", + "OpenSCAP Guide for AlmaLinux OS 8": "OpenSCAP Guide for AlmaLinux OS 8", + "AlmaLinux OS also has the availability of the CIS Benchmark.": "AlmaLinux OS also has the availability of the CIS Benchmark.", + "The Open Vulnerability and Assessment Language (OVAL), offers publicly accessible security information. This includes AlmaLinux OS 8 and 9, which have available public OVAL streams.": "The Open Vulnerability and Assessment Language (OVAL), offers publicly accessible security information. This includes AlmaLinux OS 8 and 9, which have available public OVAL streams.", + "You can find more about OVAL Streams on the ": "You can find more about OVAL Streams on the ", + "AlmaLinux OVAL Wiki Page": "AlmaLinux OVAL Wiki Page", + "The Software Bill of Materials (SBOM) provides a comprehensive list of third-party and open-source components in a codebase, including version numbers, licensing information, and potential vulnerabilities.": "The Software Bill of Materials (SBOM) provides a comprehensive list of third-party and open-source components in a codebase, including version numbers, licensing information, and potential vulnerabilities.", + "AlmaLinux Build System has implemented SBOM into its pipeline for security purposes, such as tracing the build process, making it more secure, and reducing the risk of data corruption. ": "AlmaLinux Build System has implemented SBOM into its pipeline for security purposes, such as tracing the build process, making it more secure, and reducing the risk of data corruption. ", + "Read more": "Read more", + "about SBOM and CAS integration with AlmaLinux.": "about SBOM and CAS integration with AlmaLinux.", + "AlmaLinux OS also provides ": "AlmaLinux OS also provides ", + "AlmaLinux SBOM User Guide": "AlmaLinux SBOM User Guide", + "AlmaLinux OS provides a set of security features: Errata, GPG keys, Mailing Lists, OpenSCAP, OVAL, SBOM": "AlmaLinux OS provides a set of security features: Errata, GPG keys, Mailing Lists, OpenSCAP, OVAL, SBOM" } diff --git a/layouts/index.html b/layouts/index.html index c36d6eb..056bfe7 100644 --- a/layouts/index.html +++ b/layouts/index.html @@ -17,6 +17,14 @@ flex: 0 0 auto; width: 50%; } + .container-security { + flex: 0 0 auto; + display: flex; + flex-direction: column!important; + } + .container-measure { + width: 100%!important; + } } @media (min-width: 800px) { .display-5 { @@ -54,7 +62,8 @@
-
+
+
@@ -85,10 +94,11 @@
+
-
+
@@ -154,7 +164,7 @@
-
+
@@ -174,7 +184,7 @@
-
+

{{ i18n "Get AlmaLinux OS" }}

@@ -283,6 +293,51 @@
+ + +
+
+

Security +

+
+ +
+
+ +
+

Errata

+

+ {{ i18n "AlmaLinux OS Foundation publishes Errata to help users to determine what updates such as security issues and fixed bugs are available and their importance based on analysis." }} +

+
+
+
+ +
+

OpenSCAP and OVAL

+

+ {{ i18n "AlmaLinux OS provides SCAP and SCAP Workbench packages to audit your AlmaLinux system for security compliance alongside OVAL streams." }}" +

+
+
+
+ +
+

Software Bill of Materials

+

+ {{ i18n "AlmaLinux OS has implemented SBOM into AlmaLinux Build System to make the build process more secure and possible to trace." }} +

+
+
+
+

+ {{ i18n "AlmaLinux OS provides a set of security features: Errata, GPG keys, Mailing Lists, OpenSCAP, OVAL, SBOM" }}- {{ i18n "read more" }}. +

+
+
+
+ + diff --git a/layouts/partials/common/footer.html b/layouts/partials/common/footer.html index 1829824..2105009 100644 --- a/layouts/partials/common/footer.html +++ b/layouts/partials/common/footer.html @@ -19,6 +19,7 @@
  • {{ i18n "Status Page" }}
  • {{ i18n "openQA" }}
  • {{ i18n "Build System" }}
    • +
  • {{ i18n "Security" }}
    • diff --git a/layouts/partials/common/nav.html b/layouts/partials/common/nav.html index 1a8d1b9..425df22 100644 --- a/layouts/partials/common/nav.html +++ b/layouts/partials/common/nav.html @@ -74,6 +74,11 @@ {{ i18n "Build System" }} +
  • + + {{ i18n "Security" }} + +
  • diff --git a/layouts/security/single.html b/layouts/security/single.html new file mode 100644 index 0000000..4e9210b --- /dev/null +++ b/layouts/security/single.html @@ -0,0 +1,175 @@ +{{ define "main" }} + +
    +
    +
    +
    +

    {{ i18n "Security Measures" }}

    +
    +

    Errata

    +
    +
    +

    + {{ i18n "AlmaLinux OS Foundation provides errata to inform users about available updates, including security issues and bug fixes, and their significance through analysis. Users can easily access this information by accessing our AlmaLinux security advisory portal, known as " }}{{ i18n "AlmaLinux Errata" }}. {{ i18n "More details on Errata and how to use it can be found on the " }}{{ i18n "AlmaLinux Errata Wiki page" }}.
    {{ i18n "Additionally, AlmaLinux OS is present in the " }}{{ i18n "OSV database" }}.

    + {{ i18n "Errata in JSON format for 3rd party software integration:" }} +

    +
    +
    + {{ i18n "errata.full.json for AlmaLinux OS 9" }} +
    +
    + {{ i18n "errata.full.json for AlmaLinux OS 8" }} +
    +
    +
    +
    +
    +
    +

    GPG Keys

    +
    +
    +

    + {{ i18n "AlmaLinux OS Foundation signs all of its software packages using a GPG signature key, which is verified by default when installing packages via dnf or graphical update tools. If a package is not signed or has an invalid signature, dnf or graphical update tools will warn the user.s will refuse to install it." }}
    + {{ i18n "It’s recommended to verify the signature of a package before you install it." }} +

    +
    +
    +

    AlmaLinux OS 9

    + rsa4096/D36CB86CB86B3716 (2022-01-18):
    + AlmaLinux OS 9 <packager@almalinux.org>
    + {{ i18n "Location:" }} /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux-9
    + {{ i18n "Download:" }} AlmaLinux
    + {{ i18n "Download:" }} pgp.mit.edu
    +
    + +
    + + +
    +
    +
    +
    +

    AlmaLinux OS 8

    + rsa4096/488FCF7C3ABB34F8 (2021-01-12): + AlmaLinux <packager@almalinux.org> + {{ i18n "Location:" }} /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux + {{ i18n "Download:" }} AlmaLinux + {{ i18n "Download:" }} pgp.mit.edu +
    + +
    + +
    +
    +
    +
    +
    +
    +
    +
    +

    Security Mailing List

    +
    +
    +

    + {{ i18n "To receive security updates and errata, users can sign up for the " }}{{ i18n "AlmaLinux Security Mailing List" }}. {{ i18n "Subscribing to the list will allow users to stay informed and updated on any security fixes as soon as they are available." }} +

    +
    +
    +
    +
    +

    OpenSCAP and SCAP Workbench

    +
    +
    +

    + {{ i18n "The Security Content Automation Protocol (SCAP) automates vulnerability management, measurement, and policy compliance evaluation of systems. AlmaLinux OS offers an OpenSCAP Guide that instructs on how to use the OpenSCAP and SCAP Workbench to audit your AlmaLinux system security compliance." }}
    +

    +
    +
    + {{ i18n "OpenSCAP Guide for AlmaLinux OS 9" }} +
    +
    + {{ i18n "OpenSCAP Guide for AlmaLinux OS 8" }} +
    +
    +

    + {{ i18n "AlmaLinux OS also has the availability of the CIS Benchmark." }} +

    +
    +
    +
    +
    +

    OVAL

    +
    +
    +

    + {{ i18n "The Open Vulnerability and Assessment Language (OVAL), offers publicly accessible security information. This includes AlmaLinux OS 8 and 9, which have available public OVAL streams." }} +

    +
    +
    + AlmaLinux OS 9 +
    +
    + AlmaLinux OS 8 +
    +
    +

    + {{ i18n "You can find more about OVAL Streams on the " }}{{ i18n "AlmaLinux OVAL Wiki Page" }}. +

    +
    +
    +
    +
    +

    SBOM

    +
    +
    +

    + {{ i18n "The Software Bill of Materials (SBOM) provides a comprehensive list of third-party and open-source components in a codebase, including version numbers, licensing information, and potential vulnerabilities." }} + {{ i18n "AlmaLinux Build System has implemented SBOM into its pipeline for security purposes, such as tracing the build process, making it more secure, and reducing the risk of data corruption. " }}{{ i18n "Read more" }} {{ i18n "about SBOM and CAS integration with AlmaLinux." }}
    + {{ i18n "AlmaLinux OS also provides " }}{{ i18n "AlmaLinux SBOM User Guide" }} +

    +
    +
    +
    +
    +
    +
    +
    + + + + +{{ end }} diff --git a/static/images/alma-fingerprint-A.svg b/static/images/alma-fingerprint-A.svg new file mode 100644 index 0000000..594c63a --- /dev/null +++ b/static/images/alma-fingerprint-A.svg @@ -0,0 +1,1949 @@ + + + + + + + + + diff --git a/static/images/errata-iconA.svg b/static/images/errata-iconA.svg new file mode 100644 index 0000000..48120b0 --- /dev/null +++ b/static/images/errata-iconA.svg @@ -0,0 +1,39 @@ + + + + + + + + + + diff --git a/static/images/open_vul_assessment_icon_B.svg b/static/images/open_vul_assessment_icon_B.svg new file mode 100644 index 0000000..83bc47e --- /dev/null +++ b/static/images/open_vul_assessment_icon_B.svg @@ -0,0 +1,38 @@ + + + + + + + + + + diff --git a/static/images/sbom_iconF.svg b/static/images/sbom_iconF.svg new file mode 100644 index 0000000..19be832 --- /dev/null +++ b/static/images/sbom_iconF.svg @@ -0,0 +1,24 @@ + + + + + + + + +