)]}'
{
  "commit": "d8e180dcd5bbbab9cd3ff2e779efcf70692ef541",
  "tree": "0d2f864e4673df4abf994e222616651409a91c0a",
  "parents": [
    "939a9421eb53d3ea83188ae13802779041caefdb"
  ],
  "author": {
    "name": "Michal Schmidt",
    "email": "mschmidt@redhat.com",
    "time": "Thu Aug 20 14:39:52 2009 -0700"
  },
  "committer": {
    "name": "James Morris",
    "email": "jmorris@namei.org",
    "time": "Mon Aug 24 11:33:40 2009 +1000"
  },
  "message": "bsdacct: switch credentials for writing to the accounting file\n\nWhen process accounting is enabled, every exiting process writes a log to\nthe account file.  In addition, every once in a while one of the exiting\nprocesses checks whether there\u0027s enough free space for the log.\n\nSELinux policy may or may not allow the exiting process to stat the fs.\nSo unsuspecting processes start generating AVC denials just because\nsomeone enabled process accounting.\n\nFor these filesystem operations, the exiting process\u0027s credentials should\nbe temporarily switched to that of the process which enabled accounting,\nbecause it\u0027s really that process which wanted to have the accounting\ninformation logged.\n\nSigned-off-by: Michal Schmidt \u003cmschmidt@redhat.com\u003e\nAcked-by: David Howells \u003cdhowells@redhat.com\u003e\nAcked-by: Serge Hallyn \u003cserue@us.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: James Morris \u003cjmorris@namei.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9f3391090b3e826d1d7cb935e58f7d01aa054b37",
      "old_mode": 33188,
      "old_path": "kernel/acct.c",
      "new_id": "9a4715a2f6bf67ecfc35310bdf7e42ead2ee11c8",
      "new_mode": 33188,
      "new_path": "kernel/acct.c"
    }
  ]
}
