Security fixes are provided for the latest release on the default branch.

Use GitHub's private vulnerability reporting feature for this repository. Include the affected version, reproduction steps, impact, and any suggested mitigation. If private reporting is unavailable, open a public issue requesting a private contact channel without including exploit details.

Do not publish a proof of concept until a fix is available and users have had a reasonable opportunity to update.

The installed systemd service runs as root because it accesses hidraw, evdev, and uinput devices. Configuration is read from /etc/matebook-gestures.conf. Keep that file and its parent directory writable only by root.

An action beginning with exec: runs through /bin/sh with the daemon's privileges. Treat such actions as root shell commands: use only fixed, trusted commands and never interpolate untrusted input.