)]}'
{
  "commit": "7420ed23a4f77480b5b7b3245e5da30dd24b7575",
  "tree": "016f5bb996c5eae66754b10243c5be6226d773f2",
  "parents": [
    "96cb8e3313c7a12e026c1ed510522ae6f6023875"
  ],
  "author": {
    "name": "Venkat Yekkirala",
    "email": "vyekkirala@TrustedCS.com",
    "time": "Fri Aug 04 23:17:57 2006 -0700"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@sunset.davemloft.net",
    "time": "Fri Sep 22 14:53:36 2006 -0700"
  },
  "message": "[NetLabel]: SELinux support\n\nAdd NetLabel support to the SELinux LSM and modify the\nsocket_post_create() LSM hook to return an error code.  The most\nsignificant part of this patch is the addition of NetLabel hooks into\nthe following SELinux LSM hooks:\n\n * selinux_file_permission()\n * selinux_socket_sendmsg()\n * selinux_socket_post_create()\n * selinux_socket_sock_rcv_skb()\n * selinux_socket_getpeersec_stream()\n * selinux_socket_getpeersec_dgram()\n * selinux_sock_graft()\n * selinux_inet_conn_request()\n\nThe basic reasoning behind this patch is that outgoing packets are\n\"NetLabel\u0027d\" by labeling their socket and the NetLabel security\nattributes are checked via the additional hook in\nselinux_socket_sock_rcv_skb().  NetLabel itself is only a labeling\nmechanism, similar to filesystem extended attributes, it is up to the\nSELinux enforcement mechanism to perform the actual access checks.\n\nIn addition to the changes outlined above this patch also includes\nsome changes to the extended bitmap (ebitmap) and multi-level security\n(mls) code to import and export SELinux TE/MLS attributes into and out\nof NetLabel.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "bb4c80fdfe7a643c521ea10d6b4b6b15236fe9b5",
      "old_mode": 33188,
      "old_path": "include/linux/security.h",
      "new_id": "9f56fb8a4a6c358091915aa34e5fae8c045a585d",
      "new_mode": 33188,
      "new_path": "include/linux/security.h"
    },
    {
      "type": "modify",
      "old_id": "6d261bf206fc83ff9aa5411a25273f53be7139d0",
      "old_mode": 33188,
      "old_path": "net/socket.c",
      "new_id": "6756e57e1ff0b01f80234142f13ec0e8dfb0e88f",
      "new_mode": 33188,
      "new_path": "net/socket.c"
    },
    {
      "type": "modify",
      "old_id": "1c45f8e4aad15b3f762a92cf474c9f24c7fcac7b",
      "old_mode": 33188,
      "old_path": "security/dummy.c",
      "new_id": "aeee70565509dd8e6c843591e142f452fb721e96",
      "new_mode": 33188,
      "new_path": "security/dummy.c"
    },
    {
      "type": "modify",
      "old_id": "33028b3b19ce1e25b16d32ea2fd75b77d47f83c7",
      "old_mode": 33188,
      "old_path": "security/selinux/hooks.c",
      "new_id": "2a6bbb921e1edc1678c30e6b7ab5c321fd2e3455",
      "new_mode": 33188,
      "new_path": "security/selinux/hooks.c"
    },
    {
      "type": "modify",
      "old_id": "79b9e0af19a0cfc6136439776b9e6a4a8d563a5d",
      "old_mode": 33188,
      "old_path": "security/selinux/include/objsec.h",
      "new_id": "0a39bfd1319fe64be319af9f95d4d398eba5d4d5",
      "new_mode": 33188,
      "new_path": "security/selinux/include/objsec.h"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "88c463eef1e1be43f948ab1dd976bffeb3c624da",
      "new_mode": 33188,
      "new_path": "security/selinux/include/selinux_netlabel.h"
    },
    {
      "type": "modify",
      "old_id": "47024a6e18440dafe797c1e648726f9c30e59a87",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/ebitmap.c",
      "new_id": "4b915eb60c45d4d017aaffa6fb411f99418535a0",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/ebitmap.c"
    },
    {
      "type": "modify",
      "old_id": "8bf41055a6cb7303c7a781e8b77513c1ecbbe5a8",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/ebitmap.h",
      "new_id": "da2d4651b10d440612d7cf9cec45016676eae0cf",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/ebitmap.h"
    },
    {
      "type": "modify",
      "old_id": "e15f7e0399b8e07b9481eb1362c219db55597633",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/mls.c",
      "new_id": "119bd6078ba12e88188b4a0e702827edc830fa1d",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/mls.c"
    },
    {
      "type": "modify",
      "old_id": "90c5e88987fa8ac8039c5c47c972449ffc5cc60d",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/mls.h",
      "new_id": "df6032c6d4926680bb6bb4c449794ee4eb25080e",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/mls.h"
    },
    {
      "type": "modify",
      "old_id": "b00ec69f0ffd5a6d219fc554fc7cb3fb79213a19",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/services.c",
      "new_id": "910afa1ffc31cd478be6d6204699d239ea35735f",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/services.c"
    }
  ]
}