)]}'
{
  "commit": "4a7ab3dcad0b66a486c468ccf0d6197c5dbe3326",
  "tree": "b88badda1de339ed01149caf05601400d2e2a9dd",
  "parents": [
    "b9679a76187694138099e09d7f5091b73086e6d7"
  ],
  "author": {
    "name": "Steffen Klassert",
    "email": "steffen.klassert@secunet.com",
    "time": "Wed Feb 23 12:56:23 2011 +0100"
  },
  "committer": {
    "name": "Eric Paris",
    "email": "eparis@redhat.com",
    "time": "Fri Feb 25 15:00:51 2011 -0500"
  },
  "message": "selinux: Fix packet forwarding checks on postrouting\n\nThe IPSKB_FORWARDED and IP6SKB_FORWARDED flags are used only in the\nmulticast forwarding case to indicate that a packet looped back after\nforward. So these flags are not a good indicator for packet forwarding.\nA better indicator is the incoming interface. If we have no socket context,\nbut an incoming interface and we see the packet in the ip postroute hook,\nthe packet is going to be forwarded.\n\nWith this patch we use the incoming interface as an indicator on packet\nforwarding.\n\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b4e1ca021fc4f3f0cb01c4757d4fc7f944ee3bc1",
      "old_mode": 33188,
      "old_path": "security/selinux/hooks.c",
      "new_id": "8ffed9f2004e297f6c518d01ee8bc8de0d70c829",
      "new_mode": 33188,
      "new_path": "security/selinux/hooks.c"
    }
  ]
}