)]}'
{
  "commit": "df008c91f83583e662ac54aee00004afc3f1894d",
  "tree": "800fd831c5beb1c4ec00b41d270462d52973a425",
  "parents": [
    "af31f412c7c7a3c0fda4bf4beaf0c85af1f263c8"
  ],
  "author": {
    "name": "Eric W. Biederman",
    "email": "ebiederm@xmission.com",
    "time": "Fri Nov 16 03:03:07 2012 +0000"
  },
  "committer": {
    "name": "David S. Miller",
    "email": "davem@davemloft.net",
    "time": "Sun Nov 18 20:32:45 2012 -0500"
  },
  "message": "net: Allow userns root to control llc, netfilter, netlink, packet, and xfrm\n\nAllow an unpriviled user who has created a user namespace, and then\ncreated a network namespace to effectively use the new network\nnamespace, by reducing capable(CAP_NET_ADMIN) and\ncapable(CAP_NET_RAW) calls to be ns_capable(net-\u003euser_ns,\nCAP_NET_ADMIN), or capable(net-\u003euser_ns, CAP_NET_RAW) calls.\n\nAllow creation of af_key sockets.\nAllow creation of llc sockets.\nAllow creation of af_packet sockets.\n\nAllow sending xfrm netlink control messages.\n\nAllow binding to netlink multicast groups.\nAllow sending to netlink multicast groups.\nAllow adding and dropping netlink multicast groups.\nAllow sending to all netlink multicast groups and port ids.\n\nAllow reading the netfilter SO_IP_SET socket option.\nAllow sending netfilter netlink messages.\nAllow setting and getting ip_vs netfilter socket options.\n\nSigned-off-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "08897a3c7ec764550d518777811fa8e3179a9492",
      "old_mode": 33188,
      "old_path": "net/key/af_key.c",
      "new_id": "5b426a6465447f954a4b4728f72a6c00966c91ee",
      "new_mode": 33188,
      "new_path": "net/key/af_key.c"
    },
    {
      "type": "modify",
      "old_id": "c2190005a11410e2f95141fb841dadc051157a8b",
      "old_mode": 33188,
      "old_path": "net/llc/af_llc.c",
      "new_id": "88709882c4641f7d147fbeaa9f48323cfc8637eb",
      "new_mode": 33188,
      "new_path": "net/llc/af_llc.c"
    },
    {
      "type": "modify",
      "old_id": "778465f217fa975c39af6fb3d7429214dbfe2a51",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipset/ip_set_core.c",
      "new_id": "fed899f600b2fdcab31604dfd09f52f32581d89f",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipset/ip_set_core.c"
    },
    {
      "type": "modify",
      "old_id": "c6cebd560936b6e70737d9e03814e2fe16fb9a45",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipvs/ip_vs_ctl.c",
      "new_id": "ec664cbb119f658991fd1e18134305ec08b4d5d8",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipvs/ip_vs_ctl.c"
    },
    {
      "type": "modify",
      "old_id": "ffb92c03a358a8ce64c9e824a09db72a823b76d8",
      "old_mode": 33188,
      "old_path": "net/netfilter/nfnetlink.c",
      "new_id": "58a09b7c3f6d50b4cf95a4c139d637a225421aae",
      "new_mode": 33188,
      "new_path": "net/netfilter/nfnetlink.c"
    },
    {
      "type": "modify",
      "old_id": "4da797fa5ec57641a0fa70b5dd1e6e517884fad4",
      "old_mode": 33188,
      "old_path": "net/netlink/af_netlink.c",
      "new_id": "c8a1eb6eca2dea3597ba9c96a01b84656bad5700",
      "new_mode": 33188,
      "new_path": "net/netlink/af_netlink.c"
    },
    {
      "type": "modify",
      "old_id": "f262dbfc7f0684c34f44bc39ea7615aa8e82e3f7",
      "old_mode": 33188,
      "old_path": "net/packet/af_packet.c",
      "new_id": "e639645e8fec8ca365c8fc1bc4fb3650db04b5f4",
      "new_mode": 33188,
      "new_path": "net/packet/af_packet.c"
    },
    {
      "type": "modify",
      "old_id": "421f9844433519eac0c41e24265d2be9c1155b49",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_user.c",
      "new_id": "eb872b2e366e1209993efe470bed7f614a299098",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_user.c"
    }
  ]
}