Add csaf for els for os

Author: sboldyreva

docs/els-for-os/README.md

@@ -1,6 +1,6 @@
 # Endless Lifecycle Support for OS
 
-TuxCare's [Endless Lifecycle Support (ELS) for OS](https://tuxcare.com/extended-lifecycle-support/) service provides security updates, system enhancement patches, and selected bug fixes for older versions of a variety of Linux distributions, including CentOS 6, Oracle Linux 6, CentOS 7, Oracle Linux 7, Red Hat Enterprise Linux 7, CentOS 8, CentOS Stream 8, Ubuntu 16.04, and Ubuntu 18.04. These distributions have either reached their end of standard support from vendors or have reached End of Life (EOL).
+TuxCare's [Endless Lifecycle Support (ELS) for OS](https://tuxcare.com/extended-lifecycle-support/) service provides security updates, system enhancement patches, and selected bug fixes for older versions of a variety of Linux distributions, including **CentOS 6, Oracle Linux 6, CentOS 7, Oracle Linux 7, Red Hat Enterprise Linux 7, CentOS 8, CentOS Stream 8, Ubuntu 16.04, and Ubuntu 18.04**. These distributions have either reached their end of standard support from vendors or have reached End of Life (EOL).
 
 Our ELS service is designed to provide solutions for organizations that are not yet ready to migrate to newer versions and that are seeking long-term stability for their out-of-date operating systems. The service coverage includes updates for the Linux kernel and a list of essential packages that are integral to server operations.
 
@@ -573,17 +573,17 @@ Identifying the vulnerabilities that apply to your systems is an important task
 
 ### TuxCare ELS OVAL Streams
 
-* CentOS 6 ELS: [https://repo.cloudlinux.com/centos6-els/centos6-els-oval.xml](https://repo.cloudlinux.com/centos6-els/centos6-els-oval.xml)
-* CentOS 7 ELS: [https://repo.tuxcare.com/centos7-els/centos7-els-oval.xml](https://repo.tuxcare.com/centos7-els/centos7-els-oval.xml)
-* CentOS 8.4 ELS: [https://repo.cloudlinux.com/centos8.4-els/centos84-els-oval.xml](https://repo.cloudlinux.com/centos8.4-els/centos84-els-oval.xml)
-* CentOS 8.5 ELS: [https://repo.cloudlinux.com/centos8.5-els/centos85-els-oval.xml](https://repo.cloudlinux.com/centos8.5-els/centos85-els-oval.xml)
-* CentOS Stream 8 ELS: [https://repo.tuxcare.com/centos8stream-els/centos8stream-els-oval.xml](https://repo.tuxcare.com/centos8stream-els/centos8stream-els-oval.xml)
-* Oracle Linux 6 ELS: [https://repo.cloudlinux.com/oraclelinux6-els/oraclelinux6-els-oval.xml](https://repo.cloudlinux.com/oraclelinux6-els/oraclelinux6-els-oval.xml)
-* Oracle Linux 7 ELS: [https://repo.tuxcare.com/oraclelinux7-els/oraclelinux7-els-oval.xml](https://repo.tuxcare.com/oraclelinux7-els/oraclelinux7-els-oval.xml)
-* Red Hat Enterprise Linux 7 ELS: [https://repo.tuxcare.com/rhel7-els/rhel7-els-oval.xml](https://repo.tuxcare.com/rhel7-els/rhel7-els-oval.xml)
-* Ubuntu 16.04 ELS: [https://repo.cloudlinux.com/ubuntu16_04-els/ubuntu16.04-els-oval.xml](https://repo.cloudlinux.com/ubuntu16_04-els/ubuntu16.04-els-oval.xml)
-* Ubuntu 18.04 ELS: [https://repo.cloudlinux.com/ubuntu18_04-els/ubuntu18.04-els-oval.xml](https://repo.cloudlinux.com/ubuntu18_04-els/ubuntu18.04-els-oval.xml)
-* Ubuntu 20.04 ELS: [https://repo.tuxcare.com/ubuntu20_04-els/ubuntu20.04-els-oval.xml](https://repo.tuxcare.com/ubuntu20_04-els/ubuntu20.04-els-oval.xml)
+* CentOS 6 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/centos6els/oval.xml)
+* CentOS 7 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/centos7els/oval.xml)
+* CentOS 8.4 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/centos8.4els/oval.xml)
+* CentOS 8.5 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/centos8.5els/oval.xml)
+* CentOS Stream 8 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/centos-stream8els/oval.xml)
+* Oracle Linux 6 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/oraclelinux6els/oval.xml)
+* Oracle Linux 7 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/oraclelinux7els/oval.xml)
+* Red Hat Enterprise Linux 7 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/rhel7els/oval.xml)
+* Ubuntu 16.04 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/ubuntu16.04els/oval.xml)
+* Ubuntu 18.04 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/ubuntu18.04els/oval.xml)
+* Ubuntu 20.04 ELS: [oval.xml](https://security.tuxcare.com/oval/els_os/ubuntu20.04els/oval.xml)
 
 
 ### How to use OpenSCAP with TuxCare ELS
@@ -600,15 +600,15 @@ OpenSCAP is an open source vulnerability scanner and compliance tool and it can
   ```
   apt-get install els-define libopenscap8 -y
   ```
-2. Download OVAL stream:
+2. Download OVAL stream. For example, Ubuntu 18.04:
 
 ```
-wget https://repo.cloudlinux.com/ubuntu18_04-els/ubuntu18.04-els-oval.xml
+wget https://security.tuxcare.com/oval/els_os/ubuntu18.04els/oval.xml
 ```
 3. Run scanning:
 
 ```
-oscap oval eval --results results.xml --report report.html ubuntu18.04-els-oval.xml
+oscap oval eval --results results.xml --report report.html oval.xml
 ```
 4. Examine scan results report
 
@@ -648,20 +648,48 @@ To detect whether a system has TuxCare ELS installed, check for following file b
 
 Once that is validated, you can use the corresponding to the operating system OVAL files from above to scan for vulnerabilities.
 
+## Common Security Advisory Framework
+
+Common Security Advisory Framework (CSAF) is a machine-readable format, standardized by [OASIS](https://www.csaf.io/). It's designed to enable consistent and automated sharing of security advisory information. 
+
+TuxCare publishes the following CSAF files at [security.tuxcare.com](https://security.tuxcare.com/csaf/v2/):
+* CSAF Vulnerability Exploitability eXchange (VEX) files – indexed by CVE VEX documents are available in CSAF 2.0 format, including past CVEs.
+* CSAF Security Advisory files – advisories are published in CSAF 2.0 format and indexed by Security Advisory.
+
+`provider-matadata.json` contains information for tools and users about where and how to retrieve CSAF advisories published by TuxCare. By OASIS requirements, it is available at two URLs (both serving the same file):
+* [csaf.data.security.tuxcare.com](https://csaf.data.security.tuxcare.com/)
+* [tuxcare.com/.well-known/csaf/provider-metadata.json](https://tuxcare.com/.well-known/csaf/provider-metadata.json)
+
+### TuxCare CSAF data
+
+Currently, we provide CSAF data for the following OS versions:
+
+* CentOS 6 ELS: [security.tuxcare.com/csaf/v2/els_os/centos6els/](https://security.tuxcare.com/csaf/v2/els_os/centos6els/)
+* CentOS 7 ELS: [security.tuxcare.com/csaf/v2/els_os/centos7els/](hhttps://security.tuxcare.com/csaf/v2/els_os/centos7els/)
+* CentOS 8.4 ELS: [security.tuxcare.com/csaf/v2/els_os/centos8.4els/](https://security.tuxcare.com/csaf/v2/els_os/centos8.4els/)
+* CentOS 8.5 ELS: [security.tuxcare.com/csaf/v2/els_os/centos8.5els/](https://security.tuxcare.com/csaf/v2/els_os/centos8.5els/)
+* CentOS Stream 8 ELS: [security.tuxcare.com/csaf/v2/els_os/centos-stream8els/](https://security.tuxcare.com/csaf/v2/els_os/centos-stream8els/)
+* Oracle Linux 6 ELS: [security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/](https://security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/)
+* Oracle Linux 7 ELS: [security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/](https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/)
+* Red Hat Enterprise Linux 7 ELS: [security.tuxcare.com/csaf/v2/els_os/rhel7els/](https://security.tuxcare.com/csaf/v2/els_os/rhel7els/)
+* Ubuntu 16.04 ELS: [security.tuxcare.com/csaf/v2/els_os/ubuntu16.04els/](https://security.tuxcare.com/csaf/v2/els_os/ubuntu16.04els/)
+* Ubuntu 18.04 ELS: [security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/](https://security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/)
+* Ubuntu 20.04 ELS: [security.tuxcare.com/csaf/v2/els_os/ubuntu20.04els/](https://security.tuxcare.com/csaf/v2/els_os/ubuntu20.04els/)
+
 ## TuxCare ELS RSS releases feeds
 
-* CentOS 6 ELS: [https://cve.tuxcare.com/rss_feed/releases/centos6els](https://cve.tuxcare.com/rss_feed/releases/centos6els)
-* CentOS 7 ELS: [https://cve.tuxcare.com/rss_feed/releases/centos7els](https://cve.tuxcare.com/rss_feed/releases/centos7els)
-* CentOS 8.4 ELS: [https://cve.tuxcare.com/rss_feed/releases/centos8.4els](https://cve.tuxcare.com/rss_feed/releases/centos8.4els)
-* CentOS 8.5 ELS: [https://cve.tuxcare.com/rss_feed/releases/centos8.5els](https://cve.tuxcare.com/rss_feed/releases/centos8.5els)
-* CentOS Stream 8 ELS: [https://cve.tuxcare.com/rss_feed/releases/centos8streamels](https://cve.tuxcare.com/rss_feed/releases/centos8streamels)
-* CloudLinux 6: [https://cve.tuxcare.com/rss_feed/releases/cloudlinux6els](https://cve.tuxcare.com/rss_feed/releases/cloudlinux6els)
-* Oracle Linux 6 ELS: [https://cve.tuxcare.com/rss_feed/releases/oraclelinux6els](https://cve.tuxcare.com/rss_feed/releases/oraclelinux6els)
-* Oracle Linux 7 ELS: [https://cve.tuxcare.com/rss_feed/releases/oraclelinux7els](https://cve.tuxcare.com/rss_feed/releases/oraclelinux7els)
-* Red Hat Enterprise Linux 7 ELS: [https://cve.tuxcare.com/rss_feed/releases/rhel7els](https://cve.tuxcare.com/rss_feed/releases/rhel7els)
-* Ubuntu 16.04 ELS: [https://cve.tuxcare.com/rss_feed/releases/ubuntu16.04els](https://cve.tuxcare.com/rss_feed/releases/ubuntu16.04els)
-* Ubuntu 18.04 ELS: [https://cve.tuxcare.com/rss_feed/releases/ubuntu18.04els](https://cve.tuxcare.com/rss_feed/releases/ubuntu18.04els)
-* Ubuntu 20.04 ELS: [https://cve.tuxcare.com/rss_feed/releases/ubuntu20.04els](https://cve.tuxcare.com/rss_feed/releases/ubuntu20.04els)
+* CentOS 6 ELS: [cve.tuxcare.com/rss_feed/releases/centos6els](https://cve.tuxcare.com/rss_feed/releases/centos6els)
+* CentOS 7 ELS: [cve.tuxcare.com/rss_feed/releases/centos7els](https://cve.tuxcare.com/rss_feed/releases/centos7els)
+* CentOS 8.4 ELS: [cve.tuxcare.com/rss_feed/releases/centos8.4els](https://cve.tuxcare.com/rss_feed/releases/centos8.4els)
+* CentOS 8.5 ELS: [cve.tuxcare.com/rss_feed/releases/centos8.5els](https://cve.tuxcare.com/rss_feed/releases/centos8.5els)
+* CentOS Stream 8 ELS: [cve.tuxcare.com/rss_feed/releases/centos8streamels](https://cve.tuxcare.com/rss_feed/releases/centos8streamels)
+* CloudLinux 6: [cve.tuxcare.com/rss_feed/releases/cloudlinux6els](https://cve.tuxcare.com/rss_feed/releases/cloudlinux6els)
+* Oracle Linux 6 ELS: [cve.tuxcare.com/rss_feed/releases/oraclelinux6els](https://cve.tuxcare.com/rss_feed/releases/oraclelinux6els)
+* Oracle Linux 7 ELS: [cve.tuxcare.com/rss_feed/releases/oraclelinux7els](https://cve.tuxcare.com/rss_feed/releases/oraclelinux7els)
+* Red Hat Enterprise Linux 7 ELS: [cve.tuxcare.com/rss_feed/releases/rhel7els](https://cve.tuxcare.com/rss_feed/releases/rhel7els)
+* Ubuntu 16.04 ELS: [cve.tuxcare.com/rss_feed/releases/ubuntu16.04els](https://cve.tuxcare.com/rss_feed/releases/ubuntu16.04els)
+* Ubuntu 18.04 ELS: [cve.tuxcare.com/rss_feed/releases/ubuntu18.04els](https://cve.tuxcare.com/rss_feed/releases/ubuntu18.04els)
+* Ubuntu 20.04 ELS: [cve.tuxcare.com/rss_feed/releases/ubuntu20.04els](https://cve.tuxcare.com/rss_feed/releases/ubuntu20.04els)
 
 ## Deinstallation instructions for yum repositories