mirror of
https://github.com/Plexi09/Nadir-Kernel.git
synced 2026-10-20 23:17:27 +02:00
28 lines
827 B
Markdown
28 lines
827 B
Markdown
# Security Policy
|
|
|
|
## Supported versions
|
|
|
|
Nadir is a hobby x86-64 kernel. Only the tip of `main` is supported.
|
|
|
|
| Version | Supported |
|
|
| ------- | ------------------ |
|
|
| `main` | :white_check_mark: |
|
|
| Anything else | :x: |
|
|
|
|
If you report an issue against an old commit, please verify it still reproduces on current `main` first (`make` then `make run` in QEMU).
|
|
|
|
## Reporting a vulnerability
|
|
|
|
Use a [private security advisory](https://github.com/Plexi09/Nadir-Kernel/security/advisories/new)
|
|
This keeps the details private until a fix is ready.
|
|
|
|
Please include:
|
|
|
|
1. What you think is wrong and why it matters
|
|
2. Steps to reproduce and serial/VGA output or a `-d int -no-reboot` log.
|
|
|
|
## Out of scope
|
|
|
|
- QEMU, SeaBIOS, firmware, host toolchain and host OS
|
|
- Denial of service by crashing
|
|
- Missing hardening as such
|