)]}'
{
  "commit": "6d3dc07cbb1e88deed2e8710e215f232a56b1dce",
  "tree": "4c294d1ddac8c9f417bcd406771993aa58106f6d",
  "parents": [
    "277d342fc423fca5e66e677fe629d1b2f8f1b9e2"
  ],
  "author": {
    "name": "Casey Schaufler",
    "email": "casey@schaufler-ca.com",
    "time": "Wed Dec 31 12:54:12 2008 -0500"
  },
  "committer": {
    "name": "Paul Moore",
    "email": "paul.moore@hp.com",
    "time": "Wed Dec 31 12:54:12 2008 -0500"
  },
  "message": "smack: Add support for unlabeled network hosts and networks\n\nAdd support for unlabeled network hosts and networks.\nRelies heavily on Paul Moore\u0027s netlabel support.\n\nCreates a new entry in /smack called netlabel. Writes to /smack/netlabel\ntake the form:\n\n    A.B.C.D LABEL\nor\n    A.B.C.D/N LABEL\n\nwhere A.B.C.D is a network address, N is an integer between 0-32,\nand LABEL is the Smack label to be used. If /N is omitted /32 is\nassumed. N designates the netmask for the address. Entries are\nmatched by the most specific address/mask pair. 0.0.0.0/0 will\nmatch everything, while 192.168.1.117/32 will match exactly one\nhost.\n\nA new system label \"@\", pronounced \"web\", is defined. Processes\ncan not be assigned the web label. An address assigned the web\nlabel can be written to by any process, and packets coming from\na web address can be written to any socket. Use of the web label\nis a violation of any strict MAC policy, but the web label has\nbeen requested many times.\n\nThe nltype entry has been removed from /smack. It did not work right\nand the netlabel interface can be used to specify that all hosts\nbe treated as unlabeled.\n\nCIPSO labels on incoming packets will be honored, even from designated\nsingle label hosts. Single label hosts can only be written to by\nprocesses with labels that can write to the label of the host.\nPackets sent to single label hosts will always be unlabeled.\n\nOnce added a single label designation cannot be removed, however\nthe label may be changed.\n\nThe behavior of the ambient label remains unchanged.\n\n\nSigned-off-by: Casey Schaufler \u003ccasey@schaufler-ca.com\u003e\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "31dce559595ad48e732a306c8d759a5ce5adde80",
      "old_mode": 33188,
      "old_path": "security/smack/smack.h",
      "new_id": "b79582e4fbfd6e82dc2679890731953f5ba1926f",
      "new_mode": 33188,
      "new_path": "security/smack/smack.h"
    },
    {
      "type": "modify",
      "old_id": "247cec3b5a43abfab3939148c6a8ac97faffee5c",
      "old_mode": 33188,
      "old_path": "security/smack/smack_access.c",
      "new_id": "2e0b83e77ffea727375a23e0abe29e894573a251",
      "new_mode": 33188,
      "new_path": "security/smack/smack_access.c"
    },
    {
      "type": "modify",
      "old_id": "1b5551dfc1f74ab2119db364ef4dab08e3bcc373",
      "old_mode": 33188,
      "old_path": "security/smack/smack_lsm.c",
      "new_id": "6bfaba6177c25e94a090e2bf447113261c094502",
      "new_mode": 33188,
      "new_path": "security/smack/smack_lsm.c"
    },
    {
      "type": "modify",
      "old_id": "594e934f1385b04d97c79f6edea4c16c0d6b3ecc",
      "old_mode": 33188,
      "old_path": "security/smack/smackfs.c",
      "new_id": "bf107a389ac14c66b8c25df297bef6d56cf08c87",
      "new_mode": 33188,
      "new_path": "security/smack/smackfs.c"
    }
  ]
}
