FreedomBox/plinth/modules/security/templates/security_report.html
James Valleroy 20a1c70fc2
security: Add Sandbox Coverage to report page
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
[sunil: Change label from 'Not Running' to 'Not running' for consistency]
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
2020-02-09 15:03:22 -08:00

89 lines
2.8 KiB
HTML

{% extends "base.html" %}
{% comment %}
#
# This file is part of FreedomBox.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
{% endcomment %}
{% load bootstrap %}
{% load i18n %}
{% block content %}
<h3>{% trans "Security Report" %}</h3>
<p>
{% blocktrans trimmed with count=freedombox_report.vulns %}
The installed version of FreedomBox has {{ count }} reported security
vulnerabilities.
{% endblocktrans %}
</p>
<p>
{% blocktrans trimmed %}
The following table lists the current reported number, and historical
count, of security vulnerabilities for each installed app.
{% endblocktrans %}
</p>
<p>
{% blocktrans trimmed %}
For apps that provide services, the "Sandboxed" column shows whether
sandboxing features are in use. Sandboxing mitigates the impact of a
potentially compromised app to the rest of the system.
{% endblocktrans %}
</p>
<p>
{% blocktrans trimmed %}
"Sandbox Coverage" is a score of how effectively the service is isolated
from the rest of the system. It is only displayed while the service is
running.
{% endblocktrans %}
</p>
<table class="table table-bordered table-condensed table-striped">
<thead>
<tr>
<th>{% trans "App Name" %}</th>
<th>{% trans "Current Vulnerabilities" %}</th>
<th>{% trans "Past Vulnerabilities" %}</th>
<th>{% trans "Sandboxed" %}</th>
<th>{% trans "Sandbox Coverage" %}</th>
</tr>
</thead>
<tbody>
{% for app in apps_report %}
<tr>
<td>{{ app.name }}</td>
<td>{{ app.vulns }}</td>
<td>{{ app.past_vulns|default_if_none:"❗"}}</td>
<td>
{% if app.sandboxed is None %}
{% trans "N/A" %}
{% elif app.sandboxed %}
{% trans "Yes" %}
{% else %}
{% trans "No" %}
{% endif %}
</td>
<td>
{% if app.sandbox_coverage %}
{{ app.sandbox_coverage }}%
{% elif app.sandboxed %}
{% trans "Not running" %}
{% endif %}
</td>
</tr>
{% endfor %}
</tbody>
</table>
{% endblock %}