Security
Found a problem? Tell us.
We would rather hear about it from you than read about it somewhere else.
How to report
Email security@kernlux.com with what you found, how to reproduce it, and what you think the impact is. Please do not publish details until we have had a fair chance to fix it.
What you can expect
- We will acknowledge your report promptly and keep you updated.
- We will fix real problems as quickly as we responsibly can and credit you if you wish.
- We will not take legal action against anyone who reports in good faith and does not harm other people's data or systems.
In scope
- Our apps and installers
- The kernlux.com and kernlux.com websites
- Anything that could cause our software to run code you did not ask for
Our own rule
Nothing we ship may run privileged code from the network in the background. Updates and installs happen in front of you, and ask for your password.
Draft policy. Set the response times you can actually keep, and create security@kernlux.com, before launch. A machine-readable copy is at /.well-known/security.txt.