)]}'
{
  "commit": "2be4d74f2fd45460d70d4fe65cc1972ef45bf849",
  "tree": "5dd4b74ae295dc6ba58f974a3b748fe7a2f06d3c",
  "parents": [
    "b04eea886409de7460b5727b5931fb0bd417275f"
  ],
  "author": {
    "name": "Chris PeBenito",
    "email": "cpebenito@tresys.com",
    "time": "Fri May 03 09:05:39 2013 -0400"
  },
  "committer": {
    "name": "Eric Paris",
    "email": "eparis@redhat.com",
    "time": "Thu Jul 25 13:03:38 2013 -0400"
  },
  "message": "Add SELinux policy capability for always checking packet and peer classes.\n\nCurrently the packet class in SELinux is not checked if there are no\nSECMARK rules in the security or mangle netfilter tables.  Some systems\nprefer that packets are always checked, for example, to protect the system\nshould the netfilter rules fail to load or if the nefilter rules\nwere maliciously flushed.\n\nAdd the always_check_network policy capability which, when enabled, treats\nSECMARK as enabled, even if there are no netfilter SECMARK rules and\ntreats peer labeling as enabled, even if there is no Netlabel or\nlabeled IPSEC configuration.\n\nIncludes definition of \"redhat1\" SELinux policy capability, which\nexists in the SELinux userpace library, to keep ordering correct.\n\nThe SELinux userpace portion of this was merged last year, but this kernel\nchange fell on the floor.\n\nSigned-off-by: Chris PeBenito \u003ccpebenito@tresys.com\u003e\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b222e966babeec0037d2dbd631e7f5d2b65eedcb",
      "old_mode": 33188,
      "old_path": "security/selinux/hooks.c",
      "new_id": "4fbf2c5f26ce5f3abccf283b108d62f6bdc778a8",
      "new_mode": 33188,
      "new_path": "security/selinux/hooks.c"
    },
    {
      "type": "modify",
      "old_id": "01a0382c43cad8c95dcd85b29fdf63d97606e80a",
      "old_mode": 33188,
      "old_path": "security/selinux/include/security.h",
      "new_id": "004a2479880f8baee25b85df00fee249886a2bd5",
      "new_mode": 33188,
      "new_path": "security/selinux/include/security.h"
    },
    {
      "type": "modify",
      "old_id": "ff427733c2903cab275a05da0887478850e1e374",
      "old_mode": 33188,
      "old_path": "security/selinux/selinuxfs.c",
      "new_id": "5122affe06a8840e193150d62bd9b2f996fe67fe",
      "new_mode": 33188,
      "new_path": "security/selinux/selinuxfs.c"
    },
    {
      "type": "modify",
      "old_id": "a907217716150dd1c86b090bd0e72a5e17121e59",
      "old_mode": 33188,
      "old_path": "security/selinux/ss/services.c",
      "new_id": "d106733ad9878d6ee7543ff31c05a51f2c74b523",
      "new_mode": 33188,
      "new_path": "security/selinux/ss/services.c"
    }
  ]
}