)]}'
{
  "commit": "4c443d1b558b21520bd8fd6140b85cee0756becd",
  "tree": "e6d4fea8329bb709efd825ec14c9598a0c08e562",
  "parents": [
    "b81074800b98ac50b64d4c8d34e8abf0fda5e3d1"
  ],
  "author": {
    "name": "Stephen Smalley",
    "email": "sds@epoch.ncsc.mil",
    "time": "Mon May 16 21:53:52 2005 -0700"
  },
  "committer": {
    "name": "Linus Torvalds",
    "email": "torvalds@ppc970.osdl.org",
    "time": "Tue May 17 07:59:20 2005 -0700"
  },
  "message": "[PATCH] selinux: fix avc_alloc_node() oom with no policy loaded\n\nThis patch should fix the avc_alloc_node() oom condition that Andrew\nreported when no policy is loaded in SELinux.\n\nPrior to this patch, when no policy was loaded, the SELinux \"security\nserver\" (policy engine) was only returning allowed decisions for the\nrequested permissions for each access check.  This caused the cache to\nthrash when trying to use SELinux for real work with no policy loaded\n(typically, the no policy loaded state is only for bootstrapping to the\npoint where we can load an initial policy).\n\nThis patch changes the SELinux security server to return the complete\nallowed access vector at once, and then to reset the cache after the\ninitial policy load to flush the initial cache state created during\nbootstrapping.\n\nSigned-off-by: Stephen Smalley \u003csds@tycho.nsa.gov\u003e\nSigned-off-by: James Morris \u003cjmorris@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@osdl.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@osdl.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5a820cf88c9c985be9108eaf01936f32bd7bf8ce",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/services.c",
      "new_id": "8449d667b062f7bd81b5301846435358bcaa2788",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/services.c"
    }
  ]
}