-
Notifications
You must be signed in to change notification settings - Fork 1
04. Policies
If an end-user discovers a vulnerability in the update_full-unix script, it can be reported in the Private Vulnerability Reporting: < https://github.com/mportizlunyov/update_full-unix/security/advisories >
Please do not send any security notifications regarding any of package managers used, since I cannot control anything of any package manager. Make sure that the security vulnerabilities are about the script itself.
This program does not collect any telemetry or user data. The only time in which this program connects to the internet is during the Ping test (in order to verify connection with the internet, see Usage for details), retrieving the script's relevant SHA512 and SHA256 checksums (using CURL or WGET, whichever is detected first), and while updating packages through their respective package managers. The only time that this script accesses the user's file system is when making log files (can be disabled, see Usage for details) and when calling upon the various package managers that the script supports to update their packages.
All of these statements can be Verified, as this software is Free/Libre & Open-Source (FOSS), thus meaning that anybody can read the source code and verify what is does (license details below).
Copyright (C) <2023> Mikhail P. Ortiz-Lunyov
This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program. If not, see https://www.gnu.org/licenses/.
As stated in the GNU Public License Version 3, this program is passionately created and "distributed in the hope that is will be useful", and is regularly tested on a wide variety of Shells, Operating Systems, and other digital environments/variables.
HOWEVER, there is neither an explicit nor "implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
I am NOT responsible for any damage or inconveniences done on a system by the end user or any possible third parties, nevertheless I DO intend to create a useful quality product.
Give this project a star and let others know if it helped you!