)]}'
{
  "commit": "875179fa60ffe2eba1daaefb0af1be97ff5eda6a",
  "tree": "cc691e83f8dc2e022299362da49673fb31c2de55",
  "parents": [
    "9108d5f4b2cd82f55ad178caa0be66a866a06dcc"
  ],
  "author": {
    "name": "Paul Moore",
    "email": "paul.moore@hp.com",
    "time": "Sat Dec 01 23:27:18 2007 +1100"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@davemloft.net",
    "time": "Mon Jan 28 14:55:19 2008 -0800"
  },
  "message": "[IPSEC]: SPD auditing fix to include the netmask/prefix-length\n\nCurrently the netmask/prefix-length of an IPsec SPD entry is not included in\nany of the SPD related audit messages.  This can cause a problem when the\naudit log is examined as the netmask/prefix-length is vital in determining\nwhat network traffic is affected by a particular SPD entry.  This patch fixes\nthis problem by adding two additional fields, \"src_prefixlen\" and\n\"dst_prefixlen\", to the SPD audit messages to indicate the source and\ndestination netmasks.  These new fields are only included in the audit message\nwhen the netmask/prefix-length is less than the address length, i.e. the SPD\nentry applies to a network address and not a host address.\n\nExample audit message:\n\n type\u003dUNKNOWN[1415] msg\u003daudit(1196105849.752:25): auid\u003d0 \\\n   subj\u003droot:system_r:unconfined_t:s0-s0:c0.c1023 op\u003dSPD-add res\u003d1 \\\n   src\u003d192.168.0.0 src_prefixlen\u003d24 dst\u003d192.168.1.0 dst_prefixlen\u003d24\n\nIn addition, this patch also fixes a few other things in the\nxfrm_audit_common_policyinfo() function.  The IPv4 string formatting was\nconverted to use the standard NIPQUAD_FMT constant, the memcpy() was removed\nfrom the IPv6 code path and replaced with a typecast (the memcpy() was acting\nas a slow, implicit typecast anyway), and two local variables were created to\nmake referencing the XFRM security context and selector information cleaner.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b153f7482052f9e97806f6bfe043e38afa259cd6",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_policy.c",
      "new_id": "a76280a14e72a3269af4fdd28dd3dd360c029c9b",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_policy.c"
    }
  ]
}
