Better security policy

CODE_OF_CONDUCT.md

@@ -6,10 +6,10 @@ We as members, contributors, and leaders pledge to make participation in our
 community a harassment-free experience for everyone, regardless of age, body
 size, visible or invisible disability, ethnicity, sex characteristics, gender
 identity and expression, level of experience, education, socio-economic status,
-nationality, personal appearance, race, religion, or sexual identity
+nationality, personal appearance, race, caste, color, religion, or sexual
-and orientation.
+identity and orientation.
 
-We pledge to act and interact in ways that contribute to an open, welcoming,
+We pledge to act and interact in ways that contribute to an restpectful, open, welcoming,
 diverse, inclusive, and healthy community.
 
 ## Our Standards
@@ -18,21 +18,21 @@ Examples of behavior that contributes to a positive environment for our
 community include:
 
 * Demonstrating empathy and kindness toward other people
-* Being respectful of differing opinions, viewpoints, and experiences
+* Being respectful of differing opinions, viewpoints, experiences, and culture
-* Giving and gracefully accepting constructive feedback
+* Giving and gracefully accepting constructive feedback, or any feedback in general
 * Accepting responsibility and apologizing to those affected by our mistakes,
-  and learning from the experience
+  and learning from the experience, because we are just humans.
-* Focusing on what is best not just for us as individuals, but for the
+* Focusing on what is best not just for us as individuals, but for the overall
-  overall community
+  community
 
 Examples of unacceptable behavior include:
 
-* The use of sexualized language or imagery, and sexual attention or
+* The use of too much sexualized language or imagery, and sexual attention or advances of
-  advances of any kind
+  any kind
-* Trolling, insulting or derogatory comments, and personal or political attacks
+* Insulting or derogatory comments, and personal or political attacks
 * Public or private harassment
-* Publishing others' private information, such as a physical or email
+* Publishing others' private information, such as a physical or email address,
-  address, without their explicit permission
+  without their explicit permission
 * Other conduct which could reasonably be considered inappropriate in a
   professional setting
 
@@ -52,7 +52,7 @@ decisions when appropriate.
 
 This Code of Conduct applies within all community spaces, and also applies when
 an individual is officially representing the community in public spaces.
-Examples of representing our community include using an official e-mail address,
+Examples of representing our community include using an official email address,
 posting via an official social media account, or acting as an appointed
 representative at an online or offline event.
 
@@ -60,7 +60,7 @@ representative at an online or offline event.
 
 Instances of abusive, harassing, or otherwise unacceptable behavior may be
 reported to the community leaders responsible for enforcement at
-vinceale7082@vinceale7082.is-a.dev.
+vinceale7082@vinceale7082.is-a.dev or vinceale7082@gmail.com
 All complaints will be reviewed and investigated promptly and fairly.
 
 All community leaders are obligated to respect the privacy and security of the
@@ -78,19 +78,19 @@ unprofessional or unwelcome in the community.
 
 **Consequence**: A private, written warning from community leaders, providing
 clarity around the nature of the violation and an explanation of why the
-behavior was inappropriate. A public apology may be requested.
+behavior was inappropriate. A public apology will be requested, unless it's not that big of a deal.
 
 ### 2. Warning
 
-**Community Impact**: A violation through a single incident or series
+**Community Impact**: A violation through a single incident or series of
-of actions.
+actions.
 
 **Consequence**: A warning with consequences for continued behavior. No
 interaction with the people involved, including unsolicited interaction with
 those enforcing the Code of Conduct, for a specified period of time. This
 includes avoiding interactions in community spaces as well as external channels
-like social media. Violating these terms may lead to a temporary or
+like social media. Violating these terms may lead to a temporary or permanent
-permanent ban.
+ban.
 
 ### 3. Temporary Ban
 
@@ -109,20 +109,24 @@ Violating these terms may lead to a permanent ban.
 standards, including sustained inappropriate behavior, harassment of an
 individual, or aggression toward or disparagement of classes of individuals.
 
-**Consequence**: A permanent ban from any sort of public interaction within
+**Consequence**: A permanent ban from any sort of public interaction within the
-the community.
+community.
 
 ## Attribution
 
 This Code of Conduct is adapted from the [Contributor Covenant][homepage],
-version 2.0, available at
+version 2.1, available at
-https://www.contributor-covenant.org/version/2/0/code_of_conduct.html.
+[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
 
-Community Impact Guidelines were inspired by [Mozilla's code of conduct
+Community Impact Guidelines were inspired by
-enforcement ladder](https://github.com/mozilla/diversity).
+[Mozilla's code of conduct enforcement ladder][Mozilla CoC].
-
-[homepage]: https://www.contributor-covenant.org
 
 For answers to common questions about this code of conduct, see the FAQ at
-https://www.contributor-covenant.org/faq. Translations are available at
+[https://www.contributor-covenant.org/faq][FAQ]. Translations are available at
-https://www.contributor-covenant.org/translations.
+[https://www.contributor-covenant.org/translations][translations].
+
+[homepage]: https://www.contributor-covenant.org
+[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
+[Mozilla CoC]: https://github.com/mozilla/diversity
+[FAQ]: https://www.contributor-covenant.org/faq
+[translations]: https://www.contributor-covenant.org/translations

CONTRIBUTING.md

@@ -1,13 +1,35 @@
-<h3>You can do whatever you want if you don't:</h3>
+XanvicOS is a project made to explore the OS developing world and, maybe, make some friends.
--Violate the Code of conduct;
+XanvicOS is a hobby project where we respect each other.
-<br>
+
--Violate the GPLv3 license;
+# Here is what you can't do
-<br>
+
--Harm and/or harass someone:
+## Violate the license
-<br>
+
--Submit code bugged af;
+XanvicOS has a license, the GPLv3 license. If has been chosen by the author of something, it has been chosen for a reason. If you violate it you don't respect the idea of the creator about his code.
-<br>
+So, in respec of the author, don't violate it.
--Do something stupid;
+
-<br>
+## Violate the Code of Conduct
--Don't respect others;
+
-<br>
+Pretty much for the same reason as the license: it exist, it has been chosen, please respect the author and what he wants.
+
+## Hurt and/or harass someone
+
+If you don't understand why, we DON'T need more people like you. As the second line says, we need to respect each other, so let's do it, no?
+
+## Do something stupid
+
+"Doing something stupid" means a lot, by don't knowing what you are doing, to commit crimes. But it doesn't mean you can't make some errors here and there, we are humans after all.
+
+# Here is what you need to do
+
+## Respect each other
+
+As I already said, this project is built off the idea of respecting each other while contributing. Without respect nothing can be done.
+
+## Don't troll (too much)
+
+You can make some trolls, but you can't make like 100 pull request about deleting all the code and call it "modernize the code"
+
+## Think before doing
+
+Self-explenatory, before doing something, think about what can be done better. If you can't think of anything better, then do it

README.md

@@ -22,7 +22,7 @@ If you want to try XanvicOS, clone the stable branch, if you want to contribute,
   How to compile XanvicOS?
 </h3>
 <br>
-Here --> https://github.com/VinceAle7082/XanvicOS/wiki/How-to-build
+Here --> https://vinceale7082.is-a.dev/xanvicos/wiki/important_things.html
 <br>
 
 <br>

SECURITY.md

@@ -1,15 +1,23 @@
 # Security Policy
 
-## Supported Versions
+## What are the supported versions?
-
+The supported version is the latest commit in the stable, and main branch.
-These are the supported versions:
+If you want talk about a bug, vulnerability, or feature please make sure that you are on the latest release, beause maybe the issue has already been resolved or the feature has been added.
-
-| Version | Supported          |
-| ------- | ------------------ |
-| All     | :white_check_mark: |
-| Not All | :x:                |
-
 
 ## Reporting a Vulnerability
 
-Create an Issue, select vulnerability, write about it and congratulations, you reported a vulnerability!
+Vulnerabilities are important, if you discover them, please report them immediately.
+If you want to report it: create an issue, select vulnerability, read the template and edit it. Congratulations, you just reported a vulnerability!
+
+## What order do we follow when fixing a vulnerability
+
+We take vulnerabilities seriusly because they are security risks, but some vulnerabilities are more important and dangerous than others.
+For this reason we have a n/10 scale in the vulnerability template.
+We read every vulnerability, and fix them in order of importance.
+
+## What security risks do I take when I use XanvicOS?
+
+XanvicOS is just a hobby project. I try to fix all the bugs, but sometimes I don't discover some.
+XanvicOS isn't being developed by a multi billion dollar company, but just by a student during his free time.
+By using XanvicOS in a not controlled enviroment (like a VM) you basically accept the fact that by using it you are exposing yourself to some security risks.
+If you find any, please report them. You'll help us.