From 916ea9dd75a8b64d4784174162aa630afbbc46ce Mon Sep 17 00:00:00 2001 From: Chris Roberts Date: Tue, 24 Sep 2019 08:32:28 -0700 Subject: [PATCH] Documentation updates to Vagrant Cloud catalog docs page These updates are based on the comments made by @ladar within #11034 --- .../source/docs/vagrant-cloud/boxes/catalog.html.md | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/website/source/docs/vagrant-cloud/boxes/catalog.html.md b/website/source/docs/vagrant-cloud/boxes/catalog.html.md index e19292436..96d621ebd 100644 --- a/website/source/docs/vagrant-cloud/boxes/catalog.html.md +++ b/website/source/docs/vagrant-cloud/boxes/catalog.html.md @@ -33,14 +33,15 @@ As with all software and configuration used from a public source, it's important to keep in mind whose box you're using. Here are some things to note when you're choosing a box: -- __The username of the user__. If it's `bento` or `canonical`, you can likely +- __The username of the user__. If it's `bento` or `ubuntu`, you can likely trust the box more than an anonymous user. - __The number of downloads of the box__. Heavily downloaded boxes are likely vetted more often by other members of the community. HashiCorp responds to reports of malicious software distributed via Vagrant Cloud -and takes down boxes. -- __The latest release date__. More up-to-date boxes contain up-to-date -software. +by disabling and/or removing boxes. If you find a box which includes +malicious software, please report it to: support+vagrantcloud@hashicorp.com. +- __The latest release date__. Boxes which are updated periodically or which +have recent release dates will generally contain more up-to-date software. - __Availability of the box download__. Vagrant Cloud periodically checks if a box -is publicly accessible. You can see this information on the box -page next to the provider. +which is externally hosted (hosted by the box author, not Vagrant Cloud) is publicly +accessible. You can see this information on the box page next to the provider.