)]}'
{
  "commit": "9faf65fb6ee2b4e08325ba2d69e5ccf0c46453d0",
  "tree": "ee167dc8c575dee062cdaf91d0b60a5997bba0c3",
  "parents": [
    "ed0321895182ffb6ecf210e066d87911b270d587"
  ],
  "author": {
    "name": "Paul Moore",
    "email": "paul.moore@hp.com",
    "time": "Fri Jun 29 11:48:16 2007 -0400"
  },
  "committer": {
    "name": "James Morris",
    "email": "jmorris@namei.org",
    "time": "Wed Jul 11 22:52:31 2007 -0400"
  },
  "message": "SELinux: use SECINITSID_NETMSG instead of SECINITSID_UNLABELED for NetLabel\n\nThese changes will make NetLabel behave like labeled IPsec where there is an\naccess check for both labeled and unlabeled packets as well as providing the\nability to restrict domains to receiving only labeled packets when NetLabel\nis in use.  The changes to the policy are straight forward with the\nfollowing necessary to receive labeled traffic (with SECINITSID_NETMSG\ndefined as \"netlabel_peer_t\"):\n\n allow mydom_t netlabel_peer_t:{ tcp_socket udp_socket rawip_socket } recvfrom;\n\nThe policy for unlabeled traffic would be:\n\n allow mydom_t unlabeled_t:{ tcp_socket udp_socket rawip_socket } recvfrom;\n\nThese policy changes, as well as more general NetLabel support, are included\nin the SELinux Reference Policy SVN tree, r2352 or later.  Users who enable\nNetLabel support in the kernel are strongly encouraged to upgrade their\npolicy to avoid network problems.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "78c3f98fcdcfa94b2bf72a2bbcc7158b11756eba",
      "old_mode": 33188,
      "old_path": "security/selinux/hooks.c",
      "new_id": "aff8f46c2aa204601b25c2442204aeb20e10c132",
      "new_mode": 33188,
      "new_path": "security/selinux/hooks.c"
    },
    {
      "type": "modify",
      "old_id": "e64eca246f1ab25ce57cb1190cc578fa643421e9",
      "old_mode": 33188,
      "old_path": "security/selinux/netlabel.c",
      "new_id": "8192e8bc9f5aa6665ce37fc219981bab206bb6b9",
      "new_mode": 33188,
      "new_path": "security/selinux/netlabel.c"
    }
  ]
}