The BlueLinuxBastion project is an open-source initiative, and we encourage users to use the latest version of the scripts available in the repository. We actively maintain and update the scripts to address any security vulnerabilities or improvements.

We take security vulnerabilities seriously and appreciate the efforts of the community in identifying and reporting them responsibly. If you discover a security vulnerability in the BlueLinuxBastion scripts or have suggestions for improving the project's security, please follow these steps:

1. Do not disclose the vulnerability publicly until it has been addressed by the project maintainers.

2. Create a new issue on the GitHub repository with the following details:

   • A clear description of the vulnerability or security concern.
   • Steps to reproduce the vulnerability, if applicable.
   • Any additional information or context that may be helpful in understanding and resolving the issue.

3. Apply the "security" label to the issue to ensure prompt attention from the project maintainers.

4. The project maintainers will acknowledge receipt of your report within 48 hours and provide an estimated timeline for addressing the vulnerability.

5. We kindly request that you do not disclose the vulnerability publicly until it has been resolved and a patch or update has been released.

When using the BlueLinuxBastion scripts in your environment, consider the following security best practices:

1. Review and Customize: Before deploying the scripts, thoroughly review the code and customize it according to your specific security requirements and environment.

2. Test in Non-Production: Always test the scripts in a non-production environment before applying them to critical systems. Ensure that the scripts behave as expected and do not introduce any unintended consequences.

3. Secure Script Execution: Ensure that the scripts are executed with appropriate privileges and access controls. Protect the scripts and their associated files from unauthorized access or modification.

4. Monitor and Audit: Regularly monitor the system logs and audit trails generated by the scripts. Investigate any suspicious activities or anomalies promptly.

5. Keep Scripts Updated: Stay informed about updates and releases of the BlueLinuxBastion project. Regularly update the scripts to benefit from bug fixes, security enhancements, and new features.

6. Educate Team Members: Ensure that all team members who use or interact with the BlueLinuxBastion scripts are aware of the security guidelines and best practices outlined in this policy.

We would like to express our gratitude to the security researchers, contributors, and users who have helped identify and report vulnerabilities in the BlueLinuxBastion project. Your efforts contribute to making the project more secure and reliable for the community.

If you have any questions, concerns, or feedback regarding the security of the BlueLinuxBastion project, please contact the project maintainers at security@fulco.net.