From 402ed1e943104b624105dd49a9c33b6c7ef6167e Mon Sep 17 00:00:00 2001
From: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
Date: Fri, 28 Mar 2025 06:09:02 -0500
Subject: [PATCH] Update /transpanrency.ejs to fit secureframe scope (#27616)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

When utm_content=secureframe:
- Edit "System settings" = "Fleet can read settings like password length
on your device."
- Edit "Software" = "Fleet can access a detailed list of the apps and
other software installed on your device."
- Remove "Browser history"
- Remove "Wi-Fi settings"
- Remote actions
- Remove "Shell scripts"
- Remove "Running processes"
- Remove "Connected hardware devices"
- Remove "Device location"
- Remove "File contents"

FYI @eashaw let me know if I'm way off base here, I didn't want to go
changing too much of your code. This request came from this [Slack
🧵](https://fleetdm.slack.com/archives/C04DNAYL1QF/p1743096509531089) and
an email from the requestor.


![image](https://github.com/user-attachments/assets/130b0335-7d61-4a79-b1a3-e863a7e468fd)
---
 website/views/pages/transparency.ejs | 42 ++++++++++++++++++++++++++--
 1 file changed, 40 insertions(+), 2 deletions(-)

diff --git a/website/views/pages/transparency.ejs b/website/views/pages/transparency.ejs
index 6d18cdf4d8..d7ff503764 100644
--- a/website/views/pages/transparency.ejs
+++ b/website/views/pages/transparency.ejs
@@ -40,7 +40,45 @@
     <div purpose="accordion" class="container-fluid d-flex flex-column justify-content-center align-items-center px-0">
       <h2 class="text-center">What personal information can Fleet see?</h2>
       <p class="mb-0">Here’s what Fleet can manage on your computer:</p>
-      <div purpose="accordion-body" class="mx-auto">
+      <div purpose="accordion-body" class="mx-auto" v-if="showSecureframeBanner">
+        <div purpose="accordion-item">
+          <p purpose="accordion-header" id="accordion__header1-sf" style="cursor: pointer;" class="accordion" data-toggle="collapse" data-target="#accordion__body1" aria-controls="accordion__body1">
+            On/off status
+            <span class="fa fa-angle-down"></span>
+          </p>
+          <p id="accordion__body1-sf" class="collapse" aria-labelledby="accordion__header1">
+            Fleet knows when your device is on or off. This is shown via the online/offline status in Fleet Desktop. This is useful for understanding the state of your device and for troubleshooting should a problem ever arise.
+          </p>
+        </div>
+        <div purpose="accordion-item">
+          <p purpose="accordion-header" id="accordion__header3-sf" style="cursor: pointer;" class="accordion" data-toggle="collapse" data-target="#accordion__body3" aria-controls="accordion__body3">
+            System settings
+            <span class="fa fa-angle-down"></span>
+          </p>
+          <p id="accordion__body3-sf" class="collapse" aria-labelledby="accordion__header3">
+            Fleet can read settings like password length on your device.
+          </p>
+        </div>
+        <div purpose="accordion-item">
+          <p purpose="accordion-header" id="accordion__header9-sf" style="cursor: pointer;" class="accordion" data-toggle="collapse" data-target="#accordion__body9" aria-controls="accordion__body9">
+            Software
+            <span class="fa fa-angle-down"></span>
+          </p>
+          <p id="accordion__body9-sf" class="collapse" aria-labelledby="accordion__header9">
+            Fleet can access a detailed list of the apps and other software installed on your device.
+          </p>
+        </div>
+        <div purpose="accordion-item">
+          <p purpose="accordion-header" id="accordion__header11-sf" style="cursor: pointer;" class="accordion" data-toggle="collapse" data-target="#accordion__body11" aria-controls="accordion__body11">
+            Security configurations
+            <span class="fa fa-angle-down"></span>
+          </p>
+          <p id="accordion__body11-sf" class="collapse" aria-labelledby="accordion__header11">
+            Fleet can see information about the status of firewalls and other security software installed on your device.
+          </p>
+        </div>
+      </div>
+      <div purpose="accordion-body" class="mx-auto" v-else>
         <div purpose="accordion-item">
           <p purpose="accordion-header" id="accordion__header1" style="cursor: pointer;" class="accordion" data-toggle="collapse" data-target="#accordion__body1" aria-controls="accordion__body1">
             On/off status
@@ -171,7 +209,7 @@
       </div>
       <p purpose="agents-note">Fleet can't guarantee that other personal data isn't being captured by user activity monitoring or cybersecurity tools like Veriato, CrowdStrike, etc.</p>
     </div>
-  </div>
+    </div>
   </div>
     <div purpose="bottom-gradient">
       <parallax-city></parallax-city>