)]}'
{
  "commit": "5975c725dfd6f7d36f493ab1453fbdbd35c1f0e3",
  "tree": "1beb7ac54f2b1b7917faee08bba39b5eba2b4cfa",
  "parents": [
    "ff76ec18cabb12a6c8f3c65bd1d23f1a770fe908"
  ],
  "author": {
    "name": "Serge E. Hallyn",
    "email": "serue@us.ibm.com",
    "time": "Thu Oct 29 11:40:17 2009 -0500"
  },
  "committer": {
    "name": "James Morris",
    "email": "jmorris@namei.org",
    "time": "Fri Oct 30 08:27:25 2009 +1100"
  },
  "message": "define convenient securebits masks for prctl users (v2)\n\nHi James, would you mind taking the following into\nsecurity-testing?\n\nThe securebits are used by passing them to prctl with the\nPR_{S,G}ET_SECUREBITS commands.  But the defines must be\nshifted to be used in prctl, which begs to be confused and\nmisused by userspace.  So define some more convenient\nvalues for userspace to specify.  This way userspace does\n\n\tprctl(PR_SET_SECUREBITS, SECBIT_NOROOT);\n\ninstead of\n\n\tprctl(PR_SET_SECUREBITS, 1 \u003c\u003c SECURE_NOROOT);\n\n(Thanks to Michael for the idea)\n\nThis patch also adds include/linux/securebits to the installed headers.\nThen perhaps it can be included by glibc\u0027s sys/prctl.h.\n\nChangelog:\n\tOct 29: Stephen Rothwell points out that issecure can\n\t\tbe under __KERNEL__.\n\tOct 14: (Suggestions by Michael Kerrisk):\n\t\t1. spell out SETUID in SECBIT_NO_SETUID*\n\t\t2. SECBIT_X_LOCKED does not imply SECBIT_X\n\t\t3. add definitions for keepcaps\n        Oct 14: As suggested by Michael Kerrisk, don\u0027t\n\t\tuse SB_* as that convention is already in\n\t\tuse.  Use SECBIT_ prefix instead.\n\nSigned-off-by: Serge E. Hallyn \u003cserue@us.ibm.com\u003e\nAcked-by: Andrew G. Morgan \u003cmorgan@kernel.org\u003e\nAcked-by: Michael Kerrisk \u003cmtk.manpages@gmail.com\u003e\nCc: Ulrich Drepper \u003cdrepper@redhat.com\u003e\nCc: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "cff4a101f2669a0450d4ab5679402351141b63b0",
      "old_mode": 33188,
      "old_path": "include/linux/Kbuild",
      "new_id": "ffcdb9b509dbf5a6617f6e3f2b3087aadadf3cae",
      "new_mode": 33188,
      "new_path": "include/linux/Kbuild"
    },
    {
      "type": "modify",
      "old_id": "d2c5ed845bcc4a740b4e30b22bd0995f821a1ed9",
      "old_mode": 33188,
      "old_path": "include/linux/securebits.h",
      "new_id": "33406174cbe8429d8be9531c029993891059958b",
      "new_mode": 33188,
      "new_path": "include/linux/securebits.h"
    }
  ]
}