E-OS takes security seriously — it's an operating system. Thank you for helping keep it and its users safe.

Because E-OS is pre-1.0 (alpha), main carries the latest security fixes; the lts/0.1 branch tracks the 0.1 “Genesis” line and receives security backports for an extended window, so a deployment can pin to a stable line instead of rolling main.

Please do not open a public issue, PR, or discussion for security bugs.

Report privately via one of:

1. GitHub Security Advisories — Security → Report a vulnerability (preferred): https://github.com/Gh0s777tt/E-OS/security/advisories/new
2. Email the maintainer: dzierzawskii98.dam@gmail.com (subject prefix [E-OS SECURITY]; PGP key on request).

Please include: affected component/commit, impact, reproduction steps, and any PoC. We aim to:

We support coordinated disclosure and will credit reporters (opt-in).

In scope: the E-OS kernel, relibc, RedoxFS, drivers, build/cookbook tooling, release artifacts, and this repository's CI/CD.

Upstream: vulnerabilities inherited from Redox OS or third-party crates should also be reported to the relevant upstream. We will help coordinate.

Out of scope: issues only affecting the archived 2019 mirror; volumetric DoS; social engineering; findings without a security impact.

E-OS's OS-level security posture is documented in:

• Threat model — assets, trust boundaries, adversaries, and the mitigations the microkernel + capability-scheme design provides (with honest non-goals for a pre-1.0 system).
• Hardening guide — a practical, impact-ordered checklist (change default credentials, encrypt the disk, minimize packages, verify downloads).
• Disk encryption — RedoxFS AES-XTS-128 full-disk encryption: installing, building and booting an encrypted E-OS root.

CI runs on GitLab (GitHub Actions is disabled account-wide, so it is not used).

• 🔑 gitleaks scans the whole history on GitLab CI (secret-scan), and cargo-deny checks RustSec advisories / licenses / sources on every merge request. GitHub secret-scanning alerts may be enabled as a mirror-side notice.
• 🤖 Renovate (GitLab, replaced Dependabot) keeps dependencies patched; optional GitLab SAST/Dependency-Scanning templates (see docs/ci.md).
• 👮 Branch protection on the default branch; CODEOWNERS review required.
• ✍️ Signed commits encouraged. Releases publish SHA256SUMS + a CycloneDX SBOM; the checksums are minisign-signed by scripts/make-release.sh (the key is user-held, off-repo). The package repo.toml manifest is signed with a hybrid ed25519 + ML-DSA-65 signature (tools/eos-repo-sign, R-703).
• ⚖️ AGPL-3.0 — modifications, including networked use, must be shared.

See docs/security.md for the contributor security guide.