)]}'
{
  "commit": "ed0321895182ffb6ecf210e066d87911b270d587",
  "tree": "832bb54666f73b06e55322df40f915c5e9ef64d7",
  "parents": [
    "13bddc2e9d591e31bf20020dc19ea6ca85de420e"
  ],
  "author": {
    "name": "Eric Paris",
    "email": "eparis@redhat.com",
    "time": "Thu Jun 28 15:55:21 2007 -0400"
  },
  "committer": {
    "name": "James Morris",
    "email": "jmorris@namei.org",
    "time": "Wed Jul 11 22:52:29 2007 -0400"
  },
  "message": "security: Protection for exploiting null dereference using mmap\n\nAdd a new security check on mmap operations to see if the user is attempting\nto mmap to low area of the address space.  The amount of space protected is\nindicated by the new proc tunable /proc/sys/vm/mmap_min_addr and defaults to\n0, preserving existing behavior.\n\nThis patch uses a new SELinux security class \"memprotect.\"  Policy already\ncontains a number of allow rules like a_t self:process * (unconfined_t being\none of them) which mean that putting this check in the process class (its\nbest current fit) would make it useless as all user processes, which we also\nwant to protect against, would be allowed. By taking the memprotect name of\nthe new class it will also make it possible for us to move some of the other\nmemory protect permissions out of \u0027process\u0027 and into the new class next time\nwe bump the policy version number (which I also think is a good future idea)\n\nAcked-by: Stephen Smalley \u003csds@tycho.nsa.gov\u003e\nAcked-by: Chris Wright \u003cchrisw@sous-sol.org\u003e\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1d192565e18207188cc93b54d962dd7d5974d7bb",
      "old_mode": 33188,
      "old_path": "Documentation/sysctl/vm.txt",
      "new_id": "8cfca173d4bca46fab5c121be80d070858aaa0c6",
      "new_mode": 33188,
      "new_path": "Documentation/sysctl/vm.txt"
    },
    {
      "type": "modify",
      "old_id": "9eb9e0fe03312614b8702e0435c1604b928e4190",
      "old_mode": 33188,
      "old_path": "include/linux/security.h",
      "new_id": "c11dc8aa0351e25be90e967a59d4f93b0f5e73b0",
      "new_mode": 33188,
      "new_path": "include/linux/security.h"
    },
    {
      "type": "modify",
      "old_id": "51f5dac42a00c9f56943a44b7d1865f604d84bde",
      "old_mode": 33188,
      "old_path": "kernel/sysctl.c",
      "new_id": "d93e13d93f24c0c25d0bfc9cfe4944cd239fc10f",
      "new_mode": 33188,
      "new_path": "kernel/sysctl.c"
    },
    {
      "type": "modify",
      "old_id": "906ed402f7cabda336a73d6d0d297b862b0d2932",
      "old_mode": 33188,
      "old_path": "mm/mmap.c",
      "new_id": "9f70c8e8c871c272047fdc4c969f285299b58926",
      "new_mode": 33188,
      "new_path": "mm/mmap.c"
    },
    {
      "type": "modify",
      "old_id": "5d4bd4f95b8e5ef28f269f604b61d133f341d27b",
      "old_mode": 33188,
      "old_path": "mm/mremap.c",
      "new_id": "bc7c52efc71bb1d5dddded25b836c4b842a54edf",
      "new_mode": 33188,
      "new_path": "mm/mremap.c"
    },
    {
      "type": "modify",
      "old_id": "2b16b00a5b115be2c13897aab5763562312ecb84",
      "old_mode": 33188,
      "old_path": "mm/nommu.c",
      "new_id": "989e2e9af5c3adc42cb250409a4b7249288e0df7",
      "new_mode": 33188,
      "new_path": "mm/nommu.c"
    },
    {
      "type": "modify",
      "old_id": "8ffd76405b5b69f0b61057be0ffc3fb2af6adb6a",
      "old_mode": 33188,
      "old_path": "security/dummy.c",
      "new_id": "d6a112ce2975c847390fed605ade3d532f4fe03a",
      "new_mode": 33188,
      "new_path": "security/dummy.c"
    },
    {
      "type": "modify",
      "old_id": "fc8601b2b7acabde473cc86a0fdc4b342a00e97a",
      "old_mode": 33188,
      "old_path": "security/security.c",
      "new_id": "024484fc59b0a5b7d22f190a1a3a755cd1dc3dab",
      "new_mode": 33188,
      "new_path": "security/security.c"
    },
    {
      "type": "modify",
      "old_id": "b29059ecc04526648785c932b4455666579e25de",
      "old_mode": 33188,
      "old_path": "security/selinux/hooks.c",
      "new_id": "78c3f98fcdcfa94b2bf72a2bbcc7158b11756eba",
      "new_mode": 33188,
      "new_path": "security/selinux/hooks.c"
    },
    {
      "type": "modify",
      "old_id": "b83e74012a979ee8bc935921fa686496fd82f681",
      "old_mode": 33188,
      "old_path": "security/selinux/include/av_perm_to_string.h",
      "new_id": "049bf69429b66d2566abc5bb063c19fc41647095",
      "new_mode": 33188,
      "new_path": "security/selinux/include/av_perm_to_string.h"
    },
    {
      "type": "modify",
      "old_id": "5fee1735bffe423d78cb559e1cb3ee529b6ced5f",
      "old_mode": 33188,
      "old_path": "security/selinux/include/av_permissions.h",
      "new_id": "eda89a2ec635db3ec67e546af97cd5d76dedc565",
      "new_mode": 33188,
      "new_path": "security/selinux/include/av_permissions.h"
    },
    {
      "type": "modify",
      "old_id": "3787990684418f540974541d3c6b68078b4c72c4",
      "old_mode": 33188,
      "old_path": "security/selinux/include/class_to_string.h",
      "new_id": "e77de0e62ea0e00deae7c92822d61b5ba9e82ce0",
      "new_mode": 33188,
      "new_path": "security/selinux/include/class_to_string.h"
    },
    {
      "type": "modify",
      "old_id": "35f309f478731aa0ea116c81055cdfd72a77460f",
      "old_mode": 33188,
      "old_path": "security/selinux/include/flask.h",
      "new_id": "a9c2b20f14b5c0584085180c272875453b9796c9",
      "new_mode": 33188,
      "new_path": "security/selinux/include/flask.h"
    }
  ]
}