)]}' { "log": [ { "commit": "9adfbfb611307060db54691bc7e6d53fdc12312b", "tree": "35d2fb021c0a4e8d2980af114363bff714301aae", "parents": [ "85efde6f4e0de9577256c5f0030088d3fd4347c1" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Feb 26 00:51:40 2009 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@elte.hu", "time": "Thu Mar 26 18:14:15 2009 +0100" }, "message": "make most exported headers use strict integer types\n\nThis takes care of all files that have only a small number\nof non-strict integer type uses.\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nCc: David Airlie \u003cairlied@linux.ie\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nCc: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nCc: netdev@vger.kernel.org\nCc: linux-ppp@vger.kernel.org\nCc: Jaroslav Kysela \u003cperex@perex.cz\u003e\nCc: Takashi Iwai \u003ctiwai@suse.de\u003e\nCc: David Woodhouse \u003cdwmw2@infradead.org\u003e\nSigned-off-by: H. Peter Anvin \u003chpa@linux.intel.com\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n" }, { "commit": "13c1d18931ebb5cf407cb348ef2cd6284d68902d", "tree": "6d590f85e48b4cce8f67e42c65b88fce8fcc49c6", "parents": [ "95430c0b140c31cb9e39f876afe1c0e9947d1aaf" ], "author": { "name": "Arnaud Ebalard", "email": "arno@natisbad.org", "time": "Sun Oct 05 13:33:42 2008 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Oct 05 13:33:42 2008 -0700" }, "message": "xfrm: MIGRATE enhancements (draft-ebalard-mext-pfkey-enhanced-migrate)\n\nProvides implementation of the enhancements of XFRM/PF_KEY MIGRATE mechanism\nspecified in draft-ebalard-mext-pfkey-enhanced-migrate-00. Defines associated\nPF_KEY SADB_X_EXT_KMADDRESS extension and XFRM/netlink XFRMA_KMADDRESS\nattribute.\n\nSigned-off-by: Arnaud Ebalard \u003carno@natisbad.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "405137d16fbe4c80b9e06e61af05856027745d23", "tree": "67c9540d5b7d968782b0d05d6a8cdee5f70afae9", "parents": [ "054b0e2b2d5ed460784e8dfbf30ff4768dbf4376" ], "author": { "name": "Joy Latten", "email": "latten@austin.ibm.com", "time": "Thu Feb 07 23:11:56 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 07 23:11:56 2008 -0800" }, "message": "[IPSEC]: Add support for aes-ctr.\n\nThe below patch allows IPsec to use CTR mode with AES encryption\nalgorithm. Tested this using setkey in ipsec-tools.\n\nSigned-off-by: Joy Latten \u003clatten@austin.ibm.com\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1a6509d991225ad210de54c63314fd9542922095", "tree": "afe5c560388558bebd3e21b7c6f789a28a323a51", "parents": [ "6fbf2cb77461a0cd0675228d20dd0f70d7b2251f" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jan 28 19:37:29 2008 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Jan 31 19:27:03 2008 -0800" }, "message": "[IPSEC]: Add support for combined mode algorithms\n\nThis patch adds support for combined mode algorithms with GCM being\nthe first algorithm supported.\n\nCombined mode algorithms can be added through the xfrm_user interface\nusing the new algorithm payload type XFRMA_ALG_AEAD. Each algorithms\nis identified by its name and the ICV length.\n\nFor the purposes of matching algorithms in xfrm_tmpl structures,\ncombined mode algorithms occupy the same name space as encryption\nalgorithms. This is in line with how they are negotiated using IKE.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9783e1df7a6bd1e4dc5e2cafcdc29b65a47473d6", "tree": "9216a285bfe23aa799ca6efa01a3f4063d798e64", "parents": [ "4387ff75f29412a234d394b0276c2b239d3d3844", "dc2e2f33bbf07344995357314fd8887f6564dba7" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Feb 08 15:25:18 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Feb 08 15:25:18 2007 -0800" }, "message": "Merge branch \u0027HEAD\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nConflicts:\n\n\tcrypto/Kconfig\n" }, { "commit": "08de61beab8a21c8e0b3906a97defda5f1f66ece", "tree": "f9b49420d9a9a7c13d8b6f0d9488a152d8af3550", "parents": [ "d0473655c8293b49808c9488152573beab4458cf" ], "author": { "name": "Shinta Sugimoto", "email": "shinta.sugimoto@ericsson.com", "time": "Thu Feb 08 13:14:33 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 08 13:14:33 2007 -0800" }, "message": "[PFKEYV2]: Extension for dynamic update of endpoint address(es)\n\nExtend PF_KEYv2 framework so that user application can take advantage\nof MIGRATE feature via PF_KEYv2 interface. User application can either\nsend or receive an MIGRATE message to/from PF_KEY socket.\n\nDetail information can be found in the internet-draft\n\u003cdraft-sugimoto-mip6-pfkey-migrate\u003e.\n\nSigned-off-by: Shinta Sugimoto \u003cshinta.sugimoto@ericsson.com\u003e\nSigned-off-by: Masahide NAKAMURA \u003cnakam@linux-ipv6.org\u003e\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "390fbd1bfaa7b561af8e4f385067c55bdf4100ba", "tree": "cb6b21e8a2fd8a2505c1593ff7cc57fd8b06070f", "parents": [ "02ab5a7056bd8441ba6ae8ba8662d4296c202ecb" ], "author": { "name": "Noriaki TAKAMIYA", "email": "takamiya@po.ntts.co.jp", "time": "Sun Oct 22 15:02:48 2006 +1000" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Feb 07 09:21:04 2007 +1100" }, "message": "[IPSEC]: added the definition of Camellia cipher\n\nThis patch adds the definitions used by pfkeyv2 interface for Camellia\ncipher algorithm.\n\nSigned-off-by: Noriaki TAKAMIYA \u003ctakamiya@po.ntts.co.jp\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "7cf4c1a5fd13820d7591179c0b925d739b2be9a7", "tree": "b8ce93b33583212af560f736f49077cd198a26e3", "parents": [ "5b2becf5dc8ebb760b0d1653604831dc0582a121" ], "author": { "name": "Kazunori MIYAZAWA", "email": "miyazawa@linux-ipv6.org", "time": "Sat Oct 28 13:21:22 2006 +1000" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Dec 06 18:38:51 2006 -0800" }, "message": "[IPSEC]: Add support for AES-XCBC-MAC\n\nThe glue of xfrm.\n\nSigned-off-by: Kazunori MIYAZAWA \u003cmiyazawa@linux-ipv6.org\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "d29ef86b0a497dd2c4f9601644a15392f7e21f73", "tree": "c4ac184e3d7366f6f8da5e83b3461b92bc45b589", "parents": [ "d5a0a1e3109339090769e40fdaa62482fcf2a717" ], "author": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Wed Nov 08 00:23:42 2006 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Dec 02 21:21:18 2006 -0800" }, "message": "[AF_KEY]: annotate\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c7ce1ae21223fe1f905feba272bc14b87994a57d", "tree": "cd527489396fd9def8d19416fd05c2c11f794394", "parents": [ "c5396a31b20991c856facbce18a2a56d1a14e8d0" ], "author": { "name": "Tushar Gohad", "email": "tgohad@mvista.com", "time": "Sat Jun 17 22:54:03 2006 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Jun 17 22:54:03 2006 -0700" }, "message": "[PFKEYV2]: Fix inconsistent typing in struct sadb_x_kmprivate.\n\nSigned-off-by: Tushar Gohad \u003ctgohad@mvista.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3235798804ee75f09d45aee5003197930de57689", "tree": "1f4612f8af6cc638736661c0899e58fb20e650e2", "parents": [ "fad6a94ee6b33ca5e6184e8b08634a6a2319d0cb" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sun Jan 15 02:12:54 2006 +0100" }, "committer": { "name": "Adrian Bunk", "email": "bunk@r063144.stusta.swh.mhn.de", "time": "Sun Jan 15 02:12:54 2006 +0100" }, "message": "Fix \"stuct\", \"strut\", \"struc\" typos\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\n" }, { "commit": "df71837d5024e2524cd51c93621e558aa7dd9f3f", "tree": "58938f1d46f3c6713b63e5a785e82fdbb10121a1", "parents": [ "88026842b0a760145aa71d69e74fbc9ec118ca44" ], "author": { "name": "Trent Jaeger", "email": "tjaeger@cse.psu.edu", "time": "Tue Dec 13 23:12:27 2005 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Jan 03 13:10:24 2006 -0800" }, "message": "[LSM-IPSec]: Security association restriction.\n\nThis patch series implements per packet access control via the\nextension of the Linux Security Modules (LSM) interface by hooks in\nthe XFRM and pfkey subsystems that leverage IPSec security\nassociations to label packets. Extensions to the SELinux LSM are\nincluded that leverage the patch for this purpose.\n\nThis patch implements the changes necessary to the XFRM subsystem,\npfkey interface, ipv4/ipv6, and xfrm_user interface to restrict a\nsocket to use only authorized security associations (or no security\nassociation) to send/receive network packets.\n\nPatch purpose:\n\nThe patch is designed to enable access control per packets based on\nthe strongly authenticated IPSec security association. Such access\ncontrols augment the existing ones based on network interface and IP\naddress. The former are very coarse-grained, and the latter can be\nspoofed. By using IPSec, the system can control access to remote\nhosts based on cryptographic keys generated using the IPSec mechanism.\nThis enables access control on a per-machine basis or per-application\nif the remote machine is running the same mechanism and trusted to\nenforce the access control policy.\n\nPatch design approach:\n\nThe overall approach is that policy (xfrm_policy) entries set by\nuser-level programs (e.g., setkey for ipsec-tools) are extended with a\nsecurity context that is used at policy selection time in the XFRM\nsubsystem to restrict the sockets that can send/receive packets via\nsecurity associations (xfrm_states) that are built from those\npolicies.\n\nA presentation available at\nwww.selinux-symposium.org/2005/presentations/session2/2-3-jaeger.pdf\nfrom the SELinux symposium describes the overall approach.\n\nPatch implementation details:\n\nOn output, the policy retrieved (via xfrm_policy_lookup or\nxfrm_sk_policy_lookup) must be authorized for the security context of\nthe socket and the same security context is required for resultant\nsecurity association (retrieved or negotiated via racoon in\nipsec-tools). This is enforced in xfrm_state_find.\n\nOn input, the policy retrieved must also be authorized for the socket\n(at __xfrm_policy_check), and the security context of the policy must\nalso match the security association being used.\n\nThe patch has virtually no impact on packets that do not use IPSec.\nThe existing Netfilter (outgoing) and LSM rcv_skb hooks are used as\nbefore.\n\nAlso, if IPSec is used without security contexts, the impact is\nminimal. The LSM must allow such policies to be selected for the\ncombination of socket and remote machine, but subsequent IPSec\nprocessing proceeds as in the original case.\n\nTesting:\n\nThe pfkey interface is tested using the ipsec-tools. ipsec-tools have\nbeen modified (a separate ipsec-tools patch is available for version\n0.5) that supports assignment of xfrm_policy entries and security\nassociations with security contexts via setkey and the negotiation\nusing the security contexts via racoon.\n\nThe xfrm_user interface is tested via ad hoc programs that set\nsecurity contexts. These programs are also available from me, and\ncontain programs for setting, getting, and deleting policy for testing\nthis interface. Testing of sa functions was done by tracing kernel\nbehavior.\n\nSigned-off-by: Trent Jaeger \u003ctjaeger@cse.psu.edu\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dd87147eed934eaff92869f3d158697c7239d1d2", "tree": "5a5d59c2678767530c2a3299a70ccfc14062b347", "parents": [ "d094cd83c06e06e01d8edb540555f3f64e4081c2" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jun 20 13:21:43 2005 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Jun 20 13:21:43 2005 -0700" }, "message": "[IPSEC]: Add XFRM_STATE_NOPMTUDISC flag\n\nThis patch adds the flag XFRM_STATE_NOPMTUDISC for xfrm states. It is\nsimilar to the nopmtudisc on IPIP/GRE tunnels. It only has an effect\non IPv4 tunnel mode states. For these states, it will ensure that the\nDF flag is always cleared.\n\nThis is primarily useful to work around ICMP blackholes.\n\nIn future this flag could also allow a larger MTU to be set within the\ntunnel just like IPIP/GRE tunnels. This could be useful for short haul\ntunnels where temporary fragmentation outside the tunnel is desired over\nsmaller fragments inside the tunnel.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nAcked-by: James Morris \u003cjmorris@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "tree": "0bba044c4ce775e45a88a51686b5d9f90697ea9d", "parents": [], "author": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@ppc970.osdl.org", "time": "Sat Apr 16 15:20:36 2005 -0700" }, "message": "Linux-2.6.12-rc2\n\nInitial git repository build. I\u0027m not bothering with the full history,\neven though we have it. We can create a separate \"historical\" git\narchive of that later if we want to, and in the meantime it\u0027s about\n3.2GB when imported into git - space that would just make the early\ngit days unnecessarily complicated, when we don\u0027t have a lot of good\ninfrastructure for it.\n\nLet it rip!\n" } ] }