)]}'
{
  "log": [
    {
      "commit": "05705e4e1158ad2c1a22817f27d91ff0758fd0a9",
      "tree": "5c1607c615c9c1582305751340456a022a97df63",
      "parents": [
        "227c43c3bca76df704231324405980851dc7f528"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Sun Feb 17 22:33:57 2008 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Feb 17 22:33:57 2008 -0800"
      },
      "message": "[NETLABEL]: Move some initialization code into __init section.\n\nEverything that is called from netlbl_init() can be marked with\n__init. This moves 620 bytes from .text section to .text.init one.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "227c43c3bca76df704231324405980851dc7f528",
      "tree": "6b6f32246a974382cc6b7d6474a18c225603a856",
      "parents": [
        "f47b7257c7368698eabff6fd7b340071932af640"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Sun Feb 17 22:33:16 2008 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Feb 17 22:33:16 2008 -0800"
      },
      "message": "[NETLABEL]: Shrink the genl-ops registration code.\n\nTurning them to array and registration in a loop saves\n80 lines of code and ~300 bytes from text section.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "370125f0a48a2584a2506fd567d690df6d87cf2c",
      "tree": "44f3d3e64d1be9f340475409aefa266ce8ff4f86",
      "parents": [
        "56628b1d8964eb7ac924154d60b5d874bfb2b1e8"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Tue Feb 12 22:38:06 2008 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Feb 12 22:38:06 2008 -0800"
      },
      "message": "[NETLABLE]: Hide netlbl_unlabel_audit_addr6 under ifdef CONFIG_IPV6.\n\nThis one is called from under this config only, so move\nit in the same place.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "56628b1d8964eb7ac924154d60b5d874bfb2b1e8",
      "tree": "aa613aac941bdffe6b328d23aac3d3d97a46ec1e",
      "parents": [
        "94de7feb2dee6d0039ecbe98ae8b63bbb63808b6"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Tue Feb 12 22:37:19 2008 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Feb 12 22:37:19 2008 -0800"
      },
      "message": "[NETLABEL]: Don\u0027t produce unused variables when IPv6 is off.\n\nSome code declares variables on the stack, but uses them\nunder #ifdef CONFIG_IPV6, so thay become unused when ipv6\nis off. Fortunately, they are used in a switch\u0027s case\nbranches, so the fix is rather simple.\n\nIs it OK from coding style POV to add braces inside \"cases\",\nor should I better avoid such style and rework the patch?\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "94de7feb2dee6d0039ecbe98ae8b63bbb63808b6",
      "tree": "c0cac64c593efc2e2dc32a7c666bb4e9c4f69bf6",
      "parents": [
        "910d6c320cac65c81d66e8fd30dca167092722eb"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Tue Feb 12 22:35:37 2008 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Feb 12 22:35:37 2008 -0800"
      },
      "message": "[NETLABEL]: Compilation for CONFIG_AUDIT\u003dn case.\n\nThe audit_log_start() will expand into an empty do { } while (0)\nconstruction and the audit_ctx becomes unused.\n\nThe solution: push current-\u003eaudit_context into audit_log_start()\ndirectly, since it is not required in any other place in the \ncalling function.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4c3a0a254e5d706d3fe01bf42261534858d05586",
      "tree": "f689952b5544f23bf9cf83d1d69b02fb4abfc131",
      "parents": [
        "0f8f27c39553dd3aedcaf5c39adefe3efef28b6b"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Tue Feb 12 22:15:14 2008 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Feb 12 22:15:14 2008 -0800"
      },
      "message": "[NETLABEL]: Fix lookup logic of netlbl_domhsh_search_def.\n\nCurrently, if the call to netlbl_domhsh_search succeeds the\nreturn result will still be NULL.\n\nFix that, by returning the found entry (if any).\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "eda61d32e8ad1d9102872f9a0abf3344bf9c5e67",
      "tree": "d1c11a47c97b3f29d54021cd4aa9c0b8963ed0c8",
      "parents": [
        "97829955ad291acec1d8b94e9911b3ceb1118bb1"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Mon Feb 04 22:29:47 2008 -0800"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Tue Feb 05 09:44:20 2008 -0800"
      },
      "message": "NetLabel: introduce a new kernel configuration API for NetLabel\n\nAdd a new set of configuration functions to the NetLabel/LSM API so that\nLSMs can perform their own configuration of the NetLabel subsystem without\nrelying on assistance from userspace.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: Casey Schaufler \u003ccasey@schaufler-ca.com\u003e\nReviewed-by: James Morris \u003cjmorris@namei.org\u003e\nCc: Chris Wright \u003cchrisw@sous-sol.org\u003e\nCc: Stephen Smalley \u003csds@tycho.nsa.gov\u003e\nCc: Casey Schaufler \u003ccasey@schaufler-ca.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "13541b3adad2dc2f56761c5193c2b88db3597f0e",
      "tree": "ef5dfff5135ecb91ccb379d351c9bc5f491e080a",
      "parents": [
        "8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:44:23 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:29 2008 +1100"
      },
      "message": "NetLabel: Add auditing to the static labeling mechanism\n\nThis patch adds auditing support to the NetLabel static labeling mechanism.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "8cc44579d1bd77ba3a32f2cb76fd9669c229c5fd",
      "tree": "802d46ff2b1b1700a3baa726d2aa4aba320376c9",
      "parents": [
        "5dbe1eb0cfc144a2b0cb1466e22bcb6fc34229a8"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:44:21 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:28 2008 +1100"
      },
      "message": "NetLabel: Introduce static network labels for unlabeled connections\n\nMost trusted OSs, with the exception of Linux, have the ability to specify\nstatic security labels for unlabeled networks.  This patch adds this ability to\nthe NetLabel packet labeling framework.\n\nIf the NetLabel subsystem is called to determine the security attributes of an\nincoming packet it first checks to see if any recognized NetLabel packet\nlabeling protocols are in-use on the packet.  If none can be found then the\nunlabled connection table is queried and based on the packets incoming\ninterface and address it is matched with a security label as configured by the\nadministrator using the netlabel_tools package.  The matching security label is\nreturned to the caller just as if the packet was explicitly labeled using a\nlabeling protocol.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "75e22910cf0c26802b09dac2e34c13e648d3ed02",
      "tree": "bf5f5c62f6db8a3057a0265dc7748bf310d26d4a",
      "parents": [
        "16efd45435fa695b501b7f73c3259bd7c77cc12c"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:38:04 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:20 2008 +1100"
      },
      "message": "NetLabel: Add IP address family information to the netlbl_skbuff_getattr() function\n\nIn order to do any sort of IP header inspection of incoming packets we need to\nknow which address family, AF_INET/AF_INET6/etc., it belongs to and since the\nsk_buff structure does not store this information we need to pass along the\naddress family separate from the packet itself.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "16efd45435fa695b501b7f73c3259bd7c77cc12c",
      "tree": "f26eb84f65192eb0a17aca399fd405100e4be974",
      "parents": [
        "1c3fad936acaf87b75055b95be781437e97d787f"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:37:59 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:19 2008 +1100"
      },
      "message": "NetLabel: Add secid token support to the NetLabel secattr struct\n\nThis patch adds support to the NetLabel LSM secattr struct for a secid token\nand a type field, paving the way for full LSM/SELinux context support and\n\"static\" or \"fallback\" labels.  In addition, this patch adds a fair amount\nof documentation to the core NetLabel structures used as part of the\nNetLabel kernel API.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "1c3fad936acaf87b75055b95be781437e97d787f",
      "tree": "43fe24b08a605db020c0a93fb5ceec1e7744822d",
      "parents": [
        "b64397e0b40e75b619aeef9a1fa21f79f801a3e8"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:37:57 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:18 2008 +1100"
      },
      "message": "NetLabel: Consolidate the LSM domain mapping/hashing locks\n\nCurrently we use two separate spinlocks to protect both the hash/mapping table\nand the default entry.  This could be considered a bit foolish because it adds\ncomplexity without offering any real performance advantage.  This patch\nremoves the dedicated default spinlock and protects the default entry with the\nhash/mapping table spinlock.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "b64397e0b40e75b619aeef9a1fa21f79f801a3e8",
      "tree": "cea93c3a06953ceb0e8876f699ff41be6c54207d",
      "parents": [
        "c783f1ce5712530ba404807c55d77ac782eb8a7d"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:37:54 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:17 2008 +1100"
      },
      "message": "NetLabel: Cleanup the LSM domain hash functions\n\nThe NetLabel/LSM domain hash table search function used an argument to specify\nif the default entry should be returned if an exact match couldn\u0027t be found in\nthe hash table.  This is a bit against the kernel\u0027s style so make two separate\nfunctions to represent the separate behaviors.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "c783f1ce5712530ba404807c55d77ac782eb8a7d",
      "tree": "3153ec98b5c6d57eb5a0aad43389d4faa6d63586",
      "parents": [
        "0ba6c33bcddc64a54b5f1c25a696c4767dc76292"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Jan 29 08:37:52 2008 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Wed Jan 30 08:17:16 2008 +1100"
      },
      "message": "NetLabel: Remove unneeded RCU read locks\n\nThis patch removes some unneeded RCU read locks as we can treat the reads as\n\"safe\" even without RCU.  It also converts the NetLabel configuration refcount\nfrom a spinlock protected u32 into atomic_t to be more consistent with the rest\nof the kernel.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "e185446ce83f327428624fc4a0392794249311a2",
      "tree": "76c2b54382370d2586569b7d62319c933a55c5d5",
      "parents": [
        "9a94b35184bf095b885ca80099381f8547d5be3a"
      ],
      "author": {
        "name": "Joe Perches",
        "email": "joe@perches.com",
        "time": "Thu Dec 20 14:03:11 2007 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Dec 20 14:03:11 2007 -0800"
      },
      "message": "[NETLABEL]: Spelling fixes\n\nSigned-off-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4be2700fb7b95f2a7cef9324879cafccab8774fc",
      "tree": "8e3839c4e1c23c7d2b105f9ea45fb0891e3f0312",
      "parents": [
        "94d3b1e586f6d4c7150501bde284c544ce99073c"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Oct 26 04:29:08 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri Oct 26 04:29:08 2007 -0700"
      },
      "message": "[NetLabel]: correct usage of RCU locking\n\nThis fixes some awkward, and perhaps even problematic, RCU lock usage in the\nNetLabel code as well as some other related trivial cleanups found when\nlooking through the RCU locking.  Most of the changes involve removing the\nredundant RCU read locks wrapping spinlocks in the case of a RCU writer.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "8f4c1f9b049df3be11090f1c2c4738700302acae",
      "tree": "51271d32096e4419173072d120176b4428e52a11",
      "parents": [
        "9d5010db7ecfd6ec00119d3b185c4c0cd3265167"
      ],
      "author": {
        "name": "Thomas Graf",
        "email": "tgraf@suug.ch",
        "time": "Wed Sep 12 14:44:36 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Wed Oct 10 16:49:16 2007 -0700"
      },
      "message": "[NETLINK]: Introduce nested and byteorder flag to netlink attribute\n\nThis change allows the generic attribute interface to be used within\nthe netfilter subsystem where this flag was initially introduced.\n\nThe byte-order flag is yet unused, it\u0027s intended use is to\nallow automatic byte order convertions for all atomic types.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3482fd9099e8aab8b8096eb6da93571ea5a0b4c2",
      "tree": "6ea34d94e11d42738fbac12c0934ed973a990908",
      "parents": [
        "4a2a4df7b6db25df8f3d5cc6dd0b096119359d92"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Aug 07 17:53:10 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 07 17:53:10 2007 -0700"
      },
      "message": "[NetLabel]: add missing rcu_dereference() calls in the LSM domain mapping hash table\nThe LSM domain mapping head table pointer was not being referenced via the RCU\nsafe dereferencing function, rcu_dereference().  This patch adds those missing\ncalls to the NetLabel code.\n\nThis has been tested using recent linux-2.6 git kernels with no visible\nregressions.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e6e0871cce2ae04f5790543ad2f4ec36b23260ba",
      "tree": "0af9d48482dbdb8b949fb673eb5bf48fd5611cc5",
      "parents": [
        "088999e98b8caecd31adc3b62223a228555c5ab7"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Wed Aug 01 11:12:59 2007 -0400"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Thu Aug 02 11:52:26 2007 -0400"
      },
      "message": "Net/Security: fix memory leaks from security_secid_to_secctx()\n\nThe security_secid_to_secctx() function returns memory that must be freed\nby a call to security_release_secctx() which was not always happening.  This\npatch fixes two of these problems (all that I could find in the kernel source\nat present).\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by:  Stephen Smalley \u003csds@tycho.nsa.gov\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "23bcdc1adebd3cb47d5666f2e9ecada95c0134e4",
      "tree": "71caf0ac9fa86e4a9cf423d968a2486656c2e196",
      "parents": [
        "589f1e81bde732dd0b1bc5d01b6bddd4bcb4527b"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Wed Jul 18 12:28:45 2007 -0400"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Thu Jul 19 10:21:11 2007 -0400"
      },
      "message": "SELinux: enable dynamic activation/deactivation of NetLabel/SELinux enforcement\n\nCreate a new NetLabel KAPI interface, netlbl_enabled(), which reports on the\ncurrent runtime status of NetLabel based on the existing configuration.  LSMs\nthat make use of NetLabel, i.e. SELinux, can use this new function to determine\nif they should perform NetLabel access checks.  This patch changes the\nNetLabel/SELinux glue code such that SELinux only enforces NetLabel related\naccess checks when netlbl_enabled() returns true.\n\nAt present NetLabel is considered to be enabled when there is at least one\nlabeled protocol configuration present.  The result is that by default NetLabel\nis considered to be disabled, however, as soon as an administrator configured\na CIPSO DOI definition NetLabel is enabled and SELinux starts enforcing\nNetLabel related access controls - including unlabeled packet controls.\n\nThis patch also tries to consolidate the multiple \"#ifdef CONFIG_NETLABEL\"\nblocks into a single block to ease future review as recommended by Linus.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "522ed7767e800cff6c650ec64b0ee0677303119c",
      "tree": "f65ecb29f2cf885018d3557f840de3ef4be6ec64",
      "parents": [
        "4f27c00bf80f122513d3a5be16ed851573164534"
      ],
      "author": {
        "name": "Miloslav Trmac",
        "email": "mitr@redhat.com",
        "time": "Sun Jul 15 23:40:56 2007 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Mon Jul 16 09:05:47 2007 -0700"
      },
      "message": "Audit: add TTY input auditing\n\nAdd TTY input auditing, used to audit system administrator\u0027s actions.  This is\nrequired by various security standards such as DCID 6/3 and PCI to provide\nnon-repudiation of administrator\u0027s actions and to allow a review of past\nactions if the administrator seems to overstep their duties or if the system\nbecomes misconfigured for unknown reasons.  These requirements do not make it\nnecessary to audit TTY output as well.\n\nCompared to an user-space keylogger, this approach records TTY input using the\naudit subsystem, correlated with other audit events, and it is completely\ntransparent to the user-space application (e.g.  the console ioctls still\nwork).\n\nTTY input auditing works on a higher level than auditing all system calls\nwithin the session, which would produce an overwhelming amount of mostly\nuseless audit events.\n\nAdd an \"audit_tty\" attribute, inherited across fork ().  Data read from TTYs\nby process with the attribute is sent to the audit subsystem by the kernel.\nThe audit netlink interface is extended to allow modifying the audit_tty\nattribute, and to allow sending explanatory audit events from user-space (for\nexample, a shell might send an event containing the final command, after the\ninteractive command-line editing and history expansion is performed, which\nmight be difficult to decipher from the TTY input alone).\n\nBecause the \"audit_tty\" attribute is inherited across fork (), it would be set\ne.g.  for sshd restarted within an audited session.  To prevent this, the\naudit_tty attribute is cleared when a process with no open TTY file\ndescriptors (e.g.  after daemon startup) opens a TTY.\n\nSee https://www.redhat.com/archives/linux-audit/2007-June/msg00000.html for a\nmore detailed rationale document for an older version of this patch.\n\n[akpm@linux-foundation.org: build fix]\nSigned-off-by: Miloslav Trmac \u003cmitr@redhat.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Alan Cox \u003calan@lxorguk.ukuu.org.uk\u003e\nCc: Paul Fulghum \u003cpaulkf@microgate.com\u003e\nCc: Casey Schaufler \u003ccasey@schaufler-ca.com\u003e\nCc: Steve Grubb \u003csgrubb@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "ba6ff9f2b5c6018b293bd21083ffaa5ad710e671",
      "tree": "7a868d3a1948ab9e1aaf7b6e64e114e0f790370d",
      "parents": [
        "6363097cc4d182f93788131b5d8f72aa91d950a0"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Thu Jun 07 18:37:15 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Jun 08 13:33:09 2007 -0700"
      },
      "message": "[NetLabel]: consolidate the struct socket/sock handling to just struct sock\n\nThe current NetLabel code has some redundant APIs which allow both\n\"struct socket\" and \"struct sock\" types to be used; this may have made\nsense at some point but it is wasteful now.  Remove the functions that\noperate on sockets and convert the callers.  Not only does this make\nthe code smaller and more consistent but it pushes the locking burden\nup to the caller which can be more intelligent about the locks.  Also,\nperform the same conversion (socket to sock) on the SELinux/NetLabel\nglue code where it make sense.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ef7c79ed645f52bcbdd88f8d54a9702c4d3fd15d",
      "tree": "4c27ec3362d958b99672366437d5eb6038dd561d",
      "parents": [
        "14a49e1fd2bb91ba2bf0e1f06711b6dbc21de02d"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Jun 05 12:38:30 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Jun 07 13:40:10 2007 -0700"
      },
      "message": "[NETLINK]: Mark netlink policies const\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5778eabd9cdbf16ea3e40248c452b4fd25554d11",
      "tree": "a488fd5fc07c01b93fe38621888cc50c64cfc0a1",
      "parents": [
        "128c6b6cbffc8203e13ea5712a8aa65d2ed82e4e"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Wed Feb 28 15:14:22 2007 -0500"
      },
      "committer": {
        "name": "James Morris",
        "email": "jmorris@namei.org",
        "time": "Thu Apr 26 01:35:48 2007 -0400"
      },
      "message": "SELinux: extract the NetLabel SELinux support from the security server\n\nUp until this patch the functions which have provided NetLabel support to\nSELinux have been integrated into the SELinux security server, which for\nvarious reasons is not really ideal.  This patch makes an effort to extract as\nmuch of the NetLabel support from the security server as possibile and move it\ninto it\u0027s own file within the SELinux directory structure.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "b08d5840d2c5a6ac0bce172f4c861974d718e34b",
      "tree": "8f9423bc255d312269065623fcb136fc661b8bc1",
      "parents": [
        "4498121ca3acbf928681b71261227d28dc29b6f6"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Feb 27 09:57:37 2007 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Wed Feb 28 09:42:14 2007 -0800"
      },
      "message": "[NET]: Fix kfree(skb)\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e1a95265b44ca31456adaacebebcde12714f0c03",
      "tree": "d8f0df48d9884ca941aaf419d756b8fa917ad2a3",
      "parents": [
        "d57b1869b231c56de441db35c647879d51c5d29e"
      ],
      "author": {
        "name": "YOSHIFUJI Hideaki",
        "email": "yoshfuji@linux-ipv6.org",
        "time": "Fri Feb 09 23:25:05 2007 +0900"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Feb 10 23:19:56 2007 -0800"
      },
      "message": "[NET] NETLABEL: Fix whitespace errors.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2a2f11c227bdf292b3a2900ad04139d301b56ac4",
      "tree": "e94ced56b21fa9258dc6d8c9d8b1e1a3f6e190a1",
      "parents": [
        "797951200679f1d5ea12a2e58cc7bdbc2848764c"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Jan 05 15:08:22 2007 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Jan 09 00:30:01 2007 -0800"
      },
      "message": "NetLabel: correct CIPSO tag handling when adding new DOI definitions\n\nThe current netlbl_cipsov4_add_common() function has two problems which are\nfixed with this patch.  The first is an off-by-one bug where it is possibile to\noverflow the doi_def-\u003etags[] array.  The second is a bug where the same\ndoi_def-\u003etags[] array was not always fully initialized, which caused sporadic\nfailures.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "caff5b6a6bfd0c55b359b2b4acd8c14f828b689e",
      "tree": "cbff31b7189e179429b5d0ef7c51e9e4d9e59930",
      "parents": [
        "1fd2a25b77bb6755d38aca50b826ff8dca81d762"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Dec 15 16:49:28 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Dec 22 11:11:58 2006 -0800"
      },
      "message": "NetLabel: correctly fill in unused CIPSOv4 level and category mappings\n\nBack when the original NetLabel patches were being changed to use Netlink\nattributes correctly some code was accidentially dropped which set all of the\nundefined CIPSOv4 level and category mappings to a sentinel value.  The result\nis the mappings data in the kernel contains bogus mappings which always map to\nzero.  This patch restores the old/correct behavior by initializing the mapping\ndata to the correct sentinel value.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "1fd2a25b77bb6755d38aca50b826ff8dca81d762",
      "tree": "9f5f8bd5cb99cefa8db812f7182b22da6ecf993c",
      "parents": [
        "c2fda5fed81eea077363b285b66eafce20dfd45a"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Dec 15 16:49:27 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Dec 22 11:11:56 2006 -0800"
      },
      "message": "NetLabel: perform input validation earlier on CIPSOv4 DOI add ops\n\nThere are a couple of cases where the user input for a CIPSOv4 DOI add\noperation was not being done soon enough; the result was unexpected behavior\nwhich was resulting in oops/panics/lockups on some platforms.  This patch moves\nthe existing input validation code earlier in the code path to protect against\nbogus user input.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "02752760359db6b00a3ffb1acfc13ef8d9eb1e3f",
      "tree": "796cd65fd4cd732b295e61dac194efbf36b78842",
      "parents": [
        "ef91fd522ba3c88d9c68261c243567bc4c5a8f55"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Wed Nov 29 13:18:18 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:31:36 2006 -0800"
      },
      "message": "NetLabel: convert to an extensibile/sparse category bitmap\n\nThe original NetLabel category bitmap was a straight char bitmap which worked\nfine for the initial release as it only supported 240 bits due to limitations\nin the CIPSO restricted bitmap tag (tag type 0x01).  This patch converts that\nstraight char bitmap into an extensibile/sparse bitmap in order to lay the\nfoundation for other CIPSO tag types and protocols.\n\nThis patch also has a nice side effect in that all of the security attributes\npassed by NetLabel into the LSM are now in a format which is in the host\u0027s\nnative byte/bit ordering which makes the LSM specific code much simpler; look\nat the changes in security/selinux/ss/ebitmap.c as an example.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "de64688ffb952a65ddbc5295ccd235d35f292593",
      "tree": "f15714858c974bb4b86023d38639a39a539901e2",
      "parents": [
        "3de4bab5b9f8848a0c16a4b1ffe0452f0d670237"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Nov 17 17:38:55 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:24:15 2006 -0800"
      },
      "message": "NetLabel: honor the audit_enabled flag\n\nThe audit_enabled flag is used to signal when syscall auditing is to be\nperformed.  While NetLabel uses a Netlink interface instead of syscalls, it is\nreasonable to consider the NetLabel Netlink interface as a form of syscall so\npay attention to the audit_enabled flag when generating audit messages in\nNetLabel.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "05e00cbf5036929355020dab4837b637203a0742",
      "tree": "642cd1852808fbd89a2c666e39f23b7f48f2c4c0",
      "parents": [
        "701a90bad99b8081a824cca52c178c8fc8f46bb2"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Nov 17 17:38:47 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:24:08 2006 -0800"
      },
      "message": "NetLabel: check for a CIPSOv4 option before we do call into the CIPSOv4 layer\n\nRight now the NetLabel code always jumps into the CIPSOv4 layer to determine if\na CIPSO IP option is present.  However, we can do this check directly in the\nNetLabel code by making use of the CIPSO_V4_OPTEXIST() macro which should save\nus a function call in the common case of not having a CIPSOv4 option present.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "701a90bad99b8081a824cca52c178c8fc8f46bb2",
      "tree": "5fed88e6707e9122d7f16e4c5d8fea7c69e090ac",
      "parents": [
        "c6fa82a9dd6160e0bc980cb0401c16bf62f2fe66"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Nov 17 17:38:46 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:24:07 2006 -0800"
      },
      "message": "NetLabel: make netlbl_lsm_secattr struct easier/quicker to understand\n\nThe existing netlbl_lsm_secattr struct required the LSM to check all of the\nfields to determine if any security attributes were present resulting in a lot\nof work in the common case of no attributes.  This patch adds a \u0027flags\u0027 field\nwhich is used to indicate which attributes are present in the structure; this\nshould allow the LSM to do a quick comparison to determine if the structure\nholds any security attributes.\n\nExample:\n\n if (netlbl_lsm_secattr-\u003eflags)\n\t/* security attributes present */\n else\n\t/* NO security attributes present */\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "cd28786d6d4209ec32a375d92188ec7b4d98779f",
      "tree": "61c0d2db9b99dd05b695202cdce7e9ec9c26ff03",
      "parents": [
        "1f758d93548fb3c6297c05a351a4ba532de6a497"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Nov 17 17:38:44 2006 -0500"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:24:05 2006 -0800"
      },
      "message": "NetLabel: convert the unlabeled accept flag to use RCU\n\nCurrently the NetLabel unlabeled packet accept flag is an atomic type and it\nis checked for every non-NetLabel packet which comes into the system but rarely\never changed.  This patch changes this flag to a normal integer and protects it\nwith RCU locking.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "17c157c889f4b07258af6bfec9e4e9dcf3c00178",
      "tree": "f17be049a40b5742ca7e67094d6a7063146568d5",
      "parents": [
        "81878d27fdd297a33f3cfcf29483fe1abaf26dec"
      ],
      "author": {
        "name": "Thomas Graf",
        "email": "tgraf@suug.ch",
        "time": "Tue Nov 14 19:46:02 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:22:42 2006 -0800"
      },
      "message": "[GENL]: Add genlmsg_put_reply() to simplify building reply headers\n\nBy modyfing genlmsg_put() to take a genl_family and by adding\ngenlmsg_put_reply() the process of constructing the netlink\nand generic netlink headers is simplified.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "81878d27fdd297a33f3cfcf29483fe1abaf26dec",
      "tree": "4ce8183643abce3ec5fe5fdab0c9104204e88e6e",
      "parents": [
        "3dabc7157859e706770c825aa229f8943db4e0e1"
      ],
      "author": {
        "name": "Thomas Graf",
        "email": "tgraf@suug.ch",
        "time": "Tue Nov 14 19:45:27 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:22:41 2006 -0800"
      },
      "message": "[GENL]: Add genlmsg_reply() to simply unicast replies to requests\n\nA generic netlink user has no interest in knowing how to\naddress the source of the original request.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "339bf98ffc6a8d8eb16fc532ac57ffbced2f8a68",
      "tree": "499ad948863d2753ca10283dcf006ad28954538e",
      "parents": [
        "a94f723d595ee085f81b1788d18e031af7eeba91"
      ],
      "author": {
        "name": "Thomas Graf",
        "email": "tgraf@suug.ch",
        "time": "Fri Nov 10 14:10:15 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sat Dec 02 21:22:11 2006 -0800"
      },
      "message": "[NETLINK]: Do precise netlink message allocations where possible\n\nAccount for the netlink message header size directly in nlmsg_new()\ninstead of relying on the caller calculate it correctly.\n\nReplaces error handling of message construction functions when\nconstructing notifications with bug traps since a failure implies\na bug in calculating the size of the skb.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nAcked-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "38c94377a36f70e86665231c9f477e445c806618",
      "tree": "92beb31d6790a434b1965ca99e4fd2903a4da4f2",
      "parents": [
        "daccff024ffeb21caa2cc479ccc33b2ec50705b1"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Sun Nov 05 16:44:06 2006 -0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Nov 05 16:44:06 2006 -0800"
      },
      "message": "[NETLABEL]: Fix build failure.\n\n\u003e the build with the attached .config failed, make ends with:\n\u003e ...\n\u003e : undefined reference to `cipso_v4_sock_getattr\u0027\n\u003e net/built-in.o: In function `netlbl_socket_getattr\u0027:\n\n ...\n\nIt looks like I was stupid and made NetLabel depend on CONFIG_NET and not\nCONFIG_INET, the patch below should fix this by making NetLabel depend on\nCONFIG_INET and CONFIG_SECURITY.  Please review and apply for 2.6.19.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ffb733c65000ee701294f7b80c4eca2a5f335637",
      "tree": "edda8e25792fe4a7bf0c619787949291276b9ed7",
      "parents": [
        "c25d5180441e344a3368d100c57f0a481c6944f7"
      ],
      "author": {
        "name": "paul.moore@hp.com",
        "email": "paul.moore@hp.com",
        "time": "Wed Oct 04 11:46:31 2006 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Wed Oct 11 23:59:29 2006 -0700"
      },
      "message": "NetLabel: fix a cache race condition\n\nTesting revealed a problem with the NetLabel cache where a cached entry could\nbe freed while in use by the LSM layer causing an oops and other problems.\nThis patch fixes that problem by introducing a reference counter to the cache\nentry so that it is only freed when it is no longer in use.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n"
    },
    {
      "commit": "95d4e6be25a68cd9fbe8c0d356b585504d8db1c7",
      "tree": "2133c970e6786bdf82004ace225b6bca19b9ddba",
      "parents": [
        "d6c641026dec68acfb4b0baa98aad960e963ed97"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Fri Sep 29 17:05:05 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri Sep 29 17:05:05 2006 -0700"
      },
      "message": "[NetLabel]: audit fixups due to delayed feedback\n\nFix some issues Steve Grubb had with the way NetLabel was using the audit\nsubsystem.  This should make NetLabel more consistent with other kernel\ngenerated audit messages specifying configuration changes.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by: Steve Grubb \u003csgrubb@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "32f50cdee666333168b5203c7864bede159f789e",
      "tree": "c4989cc2521551714f656d60f6b895232ffdeda6",
      "parents": [
        "8ea333eb5da3e3219f570220c56bca09f6f4d25a"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Thu Sep 28 14:51:47 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Sep 28 18:03:09 2006 -0700"
      },
      "message": "[NetLabel]: add audit support for configuration changes\n\nThis patch adds audit support to NetLabel, including six new audit message\ntypes shown below.\n\n #define AUDIT_MAC_UNLBL_ACCEPT 1406\n #define AUDIT_MAC_UNLBL_DENY   1407\n #define AUDIT_MAC_CIPSOV4_ADD  1408\n #define AUDIT_MAC_CIPSOV4_DEL  1409\n #define AUDIT_MAC_MAP_ADD      1410\n #define AUDIT_MAC_MAP_DEL      1411\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4cc6773508299377099aa30cf30e6a2196c5872d",
      "tree": "c96fe28eb992700065a1c98777894f5f20efe6c7",
      "parents": [
        "fd3858554b62c3af6b7664b5c58ad864c87116c9"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Mon Sep 25 15:57:13 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Sep 25 15:57:13 2006 -0700"
      },
      "message": "[NetLabel]: update docs with website information\n\nNow that all of the supporting pieces of NetLabel have a home at SourceForge\nupdate the Kconfig help text and add an entry to the MAINTAINERS file.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "fd3858554b62c3af6b7664b5c58ad864c87116c9",
      "tree": "9b01a61ed88a19331565649f04373a08ca3d3aa6",
      "parents": [
        "fcd48280643e92ec6cb29a04e9079dd7b6b5bfef"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Mon Sep 25 15:56:37 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Sep 25 15:56:37 2006 -0700"
      },
      "message": "[NetLabel]: rework the Netlink attribute handling (part 2)\n\nAt the suggestion of Thomas Graf, rewrite NetLabel\u0027s use of Netlink attributes\nto better follow the common Netlink attribute usage.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "fcd48280643e92ec6cb29a04e9079dd7b6b5bfef",
      "tree": "c594e16a021262e97f8b41493529c95bd616529e",
      "parents": [
        "4fe5d5c07ab615a52fd1b0ceba5aeed7c612821a"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Mon Sep 25 15:56:09 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Sep 25 15:56:09 2006 -0700"
      },
      "message": "[NetLabel]: rework the Netlink attribute handling (part 1)\n\nAt the suggestion of Thomas Graf, rewrite NetLabel\u0027s use of Netlink attributes\nto better follow the common Netlink attribute usage.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "14a72f53fb1bb5d5c2bdd8cf172219519664729a",
      "tree": "95a077fb9289a95c352af77f18f12e5aba3313c6",
      "parents": [
        "597811ec167fa01c926a0957a91d9e39baa30e64"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Mon Sep 25 15:52:01 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Sep 25 15:52:01 2006 -0700"
      },
      "message": "[NetLabel]: correct improper handling of non-NetLabel peer contexts\n\nFix a problem where NetLabel would always set the value of \nsk_security_struct-\u003epeer_sid in selinux_netlbl_sock_graft() to the context of\nthe socket, causing problems when users would query the context of the\nconnection.  This patch fixes this so that the value in\nsk_security_struct-\u003epeer_sid is only set when the connection is NetLabel based,\notherwise the value is untouched.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7a0e1d602288370801c353221c6a938eab925053",
      "tree": "f11ef396a27549513a91fcaf7d06dafb2b84509a",
      "parents": [
        "e448e931309e703f51d71a557973c620ff12fbda"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Tue Aug 29 17:56:04 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 22 15:18:39 2006 -0700"
      },
      "message": "[NetLabel]: add some missing #includes to various header files\n\nAdd some missing include files to the NetLabel related header files.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d387f6ad10764fc2174373b4a1cca443adee36e3",
      "tree": "ed22c34f55de9c668eed1727d46239f3b48599b7",
      "parents": [
        "2942e90050569525628a9f34e0daaa9b661b49cc"
      ],
      "author": {
        "name": "Thomas Graf",
        "email": "tgraf@suug.ch",
        "time": "Tue Aug 15 00:31:06 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 22 14:54:49 2006 -0700"
      },
      "message": "[NETLINK]: Add notification message sending interface\n\nAdds nlmsg_notify() implementing proper notification logic. The\nmessage is multicasted to all listeners in the group. The\napplications the requests orignates from can request a unicast\nback report in which case said socket will be excluded from the\nmulticast to avoid duplicated notifications.\n\nnlmsg_multicast() is extended to take allocation flags to\nallow notification in atomic contexts.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "8ce11e6a9faf1f1c849b77104adc1642c46aee95",
      "tree": "58b169b6856d5eafb8cbc1fa547ff967be9ad30c",
      "parents": [
        "e6242e928ef1e4ed853f909a7479e4934f4bcb70"
      ],
      "author": {
        "name": "Adrian Bunk",
        "email": "bunk@stusta.de",
        "time": "Mon Aug 07 21:50:48 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 22 14:54:07 2006 -0700"
      },
      "message": "[NET]: Make code static.\n\nThis patch makes needlessly global code static.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "96cb8e3313c7a12e026c1ed510522ae6f6023875",
      "tree": "35d796afb2365041bc98fdba8f1734419be6b6c8",
      "parents": [
        "d15c345fe3b8dfda0fa5a1d2143a35fffa746a43"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Thu Aug 03 16:48:59 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 22 14:53:35 2006 -0700"
      },
      "message": "[NetLabel]: CIPSOv4 and Unlabeled packet integration\n\nAdd CIPSO/IPv4 and unlabeled packet management to the NetLabel\nsubsystem.  The CIPSO/IPv4 changes allow the configuration of\nCIPSO/IPv4 within the overall NetLabel framework.  The unlabeled\npacket changes allows NetLabel to pass unlabeled packets without\nerror.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d15c345fe3b8dfda0fa5a1d2143a35fffa746a43",
      "tree": "7de6afd5f4de2fca01eaca879e342ab493dc0bba",
      "parents": [
        "446fda4f26822b2d42ab3396aafcedf38a9ff2b6"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "paul.moore@hp.com",
        "time": "Thu Aug 03 16:48:37 2006 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 22 14:53:34 2006 -0700"
      },
      "message": "[NetLabel]: core NetLabel subsystem\n\nAdd a new kernel subsystem, NetLabel, to provide explicit packet\nlabeling services (CIPSO, RIPSO, etc.) to LSM developers.  NetLabel is\ndesigned to work in conjunction with a LSM to intercept and decode\nsecurity labels on incoming network packets as well as ensure that\noutgoing network packets are labeled according to the security\nmechanism employed by the LSM.  The NetLabel subsystem is configured\nthrough a Generic NETLINK interface described in the header files\nincluded in this patch.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    }
  ]
}