orc git commit: Pushing security page.

[omalley]

Repository: orc
Updated Branches:
  refs/heads/asf-site 0c98e11b8 -> f34f44639


Pushing security page.

Signed-off-by: Owen O'Malley <omal...@apache.org>


Project: http://git-wip-us.apache.org/repos/asf/orc/repo
Commit: http://git-wip-us.apache.org/repos/asf/orc/commit/f34f4463
Tree: http://git-wip-us.apache.org/repos/asf/orc/tree/f34f4463
Diff: http://git-wip-us.apache.org/repos/asf/orc/diff/f34f4463

Branch: refs/heads/asf-site
Commit: f34f446390f8c200fd911320167fd15ab3d0568c
Parents: 0c98e11
Author: Owen O'Malley <omal...@apache.org>
Authored: Mon Dec 4 16:54:13 2017 -0800
Committer: Owen O'Malley <omal...@apache.org>
Committed: Mon Dec 4 16:54:13 2017 -0800

----------------------------------------------------------------------
 docs/acid.html |   4 +-
 index.html     |  18 ++---
 security.html  | 184 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 196 insertions(+), 10 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/orc/blob/f34f4463/docs/acid.html
----------------------------------------------------------------------
diff --git a/docs/acid.html b/docs/acid.html
index c994820..188e1fb 100644
--- a/docs/acid.html
+++ b/docs/acid.html
@@ -1075,8 +1075,8 @@ It can support millions of rows updated per a 
transaction, but it can
 not support millions of transactions an hour.</p>
 
 <p>Additionally, we wanted to support streaming ingest in to Hive tables where
-streaming applications like Flume or Storm could write data into Hive and 
-have transactions commit once a minute and queries would either see all of 
+streaming applications like Flume or Storm could write data into Hive and
+have transactions commit once a minute and queries would either see all of
 a transaction or none of it.</p>
 
 <p>HDFS is a write once file system and ORC is a write-once file format, so 
edits

http://git-wip-us.apache.org/repos/asf/orc/blob/f34f4463/index.html
----------------------------------------------------------------------
diff --git a/index.html b/index.html
index 98c3568..e1482f1 100644
--- a/index.html
+++ b/index.html
@@ -136,18 +136,20 @@
              <img src="img/asf_logo.png" width="429" height="175"
                   alt="Apache Software Foundation"></a>
           <div class="pane-content">
-            <h2 class="center-on-mobiles">ORC is an <strong>Apache</strong> 
+            <h2 class="center-on-mobiles">ORC is an <strong>Apache</strong>
                                           project.</h2>
-            <p>Apache is a non-profit organization helping open-source 
-               software projects released under the 
-               <a href="https://www.apache.org/licenses/";>Apache License</a>
+            <p>Apache is a non-profit organization helping open-source
+               software projects released under the Apache
+               <a href="https://www.apache.org/licenses/";>license</a>
                and managed with
                <a href="https://www.apache.org/foundation/how-it-works.html";>
-               open governance</a>. We'd like to
-               <a href="https://www.apache.org/foundation/thanks.html";>thank
-               </a> the Apache sponsors and encourage others to
+               open governance</a>. If you discover any
+              <a href="security.html">security</a> vulnerabilities, please
+              report them privately. Finally,
+               <a href="https://www.apache.org/foundation/thanks.html";>thanks
+               </a> to the sponsors who
                <a href="https://www.apache.org/foundation/sponsorship.html";>
-               donate</a>.
+               donate</a> to the Apache Foundation.
             </p>
           </div>
         </div>

http://git-wip-us.apache.org/repos/asf/orc/blob/f34f4463/security.html
----------------------------------------------------------------------
diff --git a/security.html b/security.html
new file mode 100644
index 0000000..72a737e
--- /dev/null
+++ b/security.html
@@ -0,0 +1,184 @@
+<!DOCTYPE HTML>
+<html lang="en-US">
+<head>
+  <meta charset="UTF-8">
+  <title>Security</title>
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <meta name="generator" content="Jekyll v2.4.0">
+  <link rel="stylesheet" 
href="//fonts.googleapis.com/css?family=Lato:300,300italic,400,400italic,700,700italic,900">
+  <link rel="stylesheet" href="/css/screen.css">
+  <link rel="icon" type="image/x-icon" href="/favicon.ico">
+  <!--[if lt IE 9]>
+  <script src="/js/html5shiv.min.js"></script>
+  <script src="/js/respond.min.js"></script>
+  <![endif]-->
+</head>
+
+
+<body class="wrap">
+  <header role="banner">
+  <nav class="mobile-nav show-on-mobiles">
+    <ul>
+  <li class="">
+    <a href="/">Home</a>
+  </li>
+  <li class="">
+    <a href="/docs/"><span class="show-on-mobiles">Docs</span>
+                     <span class="hide-on-mobiles">Documentation</span></a>
+  </li>
+  <li class="">
+    <a href="/talks/">Talks</a>
+  </li>
+  <li class="">
+    <a href="/news/">News</a>
+  </li>
+  <li class="">
+    <a href="/help/">Help</a>
+  </li>
+  <li class="">
+    <a href="/develop/">Develop</a>
+  </li>
+</ul>
+
+  </nav>
+  <div class="grid">
+    <div class="unit one-third center-on-mobiles">
+      <h1>
+        <a href="/">
+          <span class="sr-only">Apache ORC</span>
+          <img src="/img/logo.png" width="249" height="101" alt="ORC Logo">
+        </a>
+      </h1>
+    </div>
+    <nav class="main-nav unit two-thirds hide-on-mobiles">
+      <ul>
+  <li class="">
+    <a href="/">Home</a>
+  </li>
+  <li class="">
+    <a href="/docs/"><span class="show-on-mobiles">Docs</span>
+                     <span class="hide-on-mobiles">Documentation</span></a>
+  </li>
+  <li class="">
+    <a href="/talks/">Talks</a>
+  </li>
+  <li class="">
+    <a href="/news/">News</a>
+  </li>
+  <li class="">
+    <a href="/help/">Help</a>
+  </li>
+  <li class="">
+    <a href="/develop/">Develop</a>
+  </li>
+</ul>
+
+    </nav>
+  </div>
+</header>
+
+
+  <section class="standalone">
+  <div class="grid">
+
+    <div class="unit whole">
+      <article>
+        <h1>Security</h1>
+        <p>Apache ORC is a library rather than an execution framework and thus
+is less likely to have security vulnerabilities. However, if you have
+discovered one, please follow the process below.</p>
+
+<h2 id="reporting-a-vulnerability">Reporting a Vulnerability</h2>
+
+<p>We strongly encourage folks to report security vulnerabilities to our
+private security mailing list first, before disclosing them in a
+public forum.</p>
+
+<p>Please note that the security mailing list should only be used for
+reporting undisclosed security vulnerabilities in Apache ORC and
+managing the process of fixing such vulnerabilities. We cannot accept
+regular bug reports or other security related queries at this
+address. All mail sent to this address that does not relate to an
+undisclosed security problem in Apache ORC will be ignored.</p>
+
+<p>The ORC security mailing list address is:
+<a href="mailto:priv...@orc.apache.org";>priv...@orc.apache.org</a>.
+This is a private mailing list and only members of the ORC project
+are subscribed.</p>
+
+<p>Please note that we do not use a team GnuPG key. If you wish to
+encrypt your e-mail to priv...@orc.apache.org then please use the GnuPG
+keys from <a href="https://people.apache.org/keys/group/orc.asc";>ORC GPG 
keys</a> for
+the members of the
+<a href="https://people.apache.org/phonebook.html?ctte=orc";>ORC PMC</a>.</p>
+
+<h2 id="vulnerability-handling">Vulnerability Handling</h2>
+
+<p>An overview of the vulnerability handling process is:</p>
+
+<ul>
+  <li>The reporter sends email to the project privately.</li>
+  <li>The project works privately with the reporter to resolve the 
vulnerability.</li>
+  <li>The project releases a new version that includes the fix.</li>
+  <li>The vulnerability is publically announced via a <a 
href="https://cve.mitre.org/";>CVE</a>.</li>
+</ul>
+
+<h2 id="fixed-cves">Fixed CVEs</h2>
+
+<p>None.</p>
+
+      </article>
+    </div>
+
+    <div class="clear"></div>
+
+  </div>
+</section>
+
+
+  <footer role="contentinfo">
+  <p>The contents of this website are &copy;&nbsp;2017
+     <a href="https://www.apache.org/";>Apache Software Foundation</a>
+     under the terms of the <a
+      href="https://www.apache.org/licenses/LICENSE-2.0.html";>
+      Apache&nbsp;License&nbsp;v2</a>. Apache ORC and its logo are trademarks
+      of the Apache Software Foundation.</p>
+</footer>
+
+  <script>
+  var anchorForId = function (id) {
+    var anchor = document.createElement("a");
+    anchor.className = "header-link";
+    anchor.href      = "#" + id;
+    anchor.innerHTML = "<span class=\"sr-only\">Permalink</span><i class=\"fa 
fa-link\"></i>";
+    anchor.title = "Permalink";
+    return anchor;
+  };
+
+  var linkifyAnchors = function (level, containingElement) {
+    var headers = containingElement.getElementsByTagName("h" + level);
+    for (var h = 0; h < headers.length; h++) {
+      var header = headers[h];
+
+      if (typeof header.id !== "undefined" && header.id !== "") {
+        header.appendChild(anchorForId(header.id));
+      }
+    }
+  };
+
+  document.onreadystatechange = function () {
+    if (this.readyState === "complete") {
+      var contentBlock = document.getElementsByClassName("docs")[0] || 
document.getElementsByClassName("news")[0];
+      if (!contentBlock) {
+        return;
+      }
+      for (var level = 1; level <= 6; level++) {
+        linkifyAnchors(level, contentBlock);
+      }
+    }
+  };
+</script>
+
+
+</body>
+</html>