)]}'
{
  "commit": "69f594a38967f4540ce7a29b3fd214e68a8330bd",
  "tree": "dff25b5f5ef0736fb63b08729bec4ff57062c13f",
  "parents": [
    "f1c84dae0ecc51aa35c81f19a0ebcd6c0921ddcb"
  ],
  "author": {
    "name": "Eric Paris",
    "email": "eparis@redhat.com",
    "time": "Tue Jan 03 12:25:15 2012 -0500"
  },
  "committer": {
    "name": "Eric Paris",
    "email": "eparis@redhat.com",
    "time": "Thu Jan 05 18:53:00 2012 -0500"
  },
  "message": "ptrace: do not audit capability check when outputing /proc/pid/stat\n\nReading /proc/pid/stat of another process checks if one has ptrace permissions\non that process.  If one does have permissions it outputs some data about the\nprocess which might have security and attack implications.  If the current\ntask does not have ptrace permissions the read still works, but those fields\nare filled with inocuous (0) values.  Since this check and a subsequent denial\nis not a violation of the security policy we should not audit such denials.\n\nThis can be quite useful to removing ptrace broadly across a system without\nflooding the logs when ps is run or something which harmlessly walks proc.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nAcked-by: Serge E. Hallyn \u003cserge.hallyn@canonical.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "3a1dafd228d14c5e11b142084305e8b60161f84c",
      "old_mode": 33188,
      "old_path": "fs/proc/array.c",
      "new_id": "ddffd7a88b975b303dead614f713ab58a7fe4ef9",
      "new_mode": 33188,
      "new_path": "fs/proc/array.c"
    },
    {
      "type": "modify",
      "old_id": "800f113bea66382fd16dc28c85eeae34e44761b0",
      "old_mode": 33188,
      "old_path": "include/linux/ptrace.h",
      "new_id": "a27e56ca41a4cf2ae505e08710c88f745f476510",
      "new_mode": 33188,
      "new_path": "include/linux/ptrace.h"
    },
    {
      "type": "modify",
      "old_id": "210bbf045ee983697ea6c187d5d537e32ad0c779",
      "old_mode": 33188,
      "old_path": "kernel/ptrace.c",
      "new_id": "c890ac9a796235bc22a9f0f17c28eddabd32af34",
      "new_mode": 33188,
      "new_path": "kernel/ptrace.c"
    },
    {
      "type": "modify",
      "old_id": "c9605c4a2e08f3569f0efc5b8a5065ffc901c307",
      "old_mode": 33188,
      "old_path": "security/selinux/hooks.c",
      "new_id": "14f94cd29c80ce60eca1c54d31b669f4ca80f37e",
      "new_mode": 33188,
      "new_path": "security/selinux/hooks.c"
    }
  ]
}