)]}'
{
  "commit": "002ced4be6429918800ce3e41d5cbc2d7c01822c",
  "tree": "2a25e775ca7ae0a8af8426267cd4f832e0fac0f6",
  "parents": [
    "163ae1c6ad6299b19e22b4a35d5ab24a89791a98"
  ],
  "author": {
    "name": "Eric Biggers",
    "email": "ebiggers@google.com",
    "time": "Thu Sep 08 11:36:39 2016 -0700"
  },
  "committer": {
    "name": "Theodore Ts\u0027o",
    "email": "tytso@mit.edu",
    "time": "Fri Sep 09 23:38:12 2016 -0400"
  },
  "message": "fscrypto: only allow setting encryption policy on directories\n\nThe FS_IOC_SET_ENCRYPTION_POLICY ioctl allowed setting an encryption\npolicy on nondirectory files.  This was unintentional, and in the case\nof nonempty regular files did not behave as expected because existing\ndata was not actually encrypted by the ioctl.\n\nIn the case of ext4, the user could also trigger filesystem errors in\n-\u003eempty_dir(), e.g. due to mismatched \"directory\" checksums when the\nkernel incorrectly tried to interpret a regular file as a directory.\n\nThis bug affected ext4 with kernels v4.8-rc1 or later and f2fs with\nkernels v4.6 and later.  It appears that older kernels only permitted\ndirectories and that the check was accidentally lost during the\nrefactoring to share the file encryption code between ext4 and f2fs.\n\nThis patch restores the !S_ISDIR() check that was present in older\nkernels.\n\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Theodore Ts\u0027o \u003ctytso@mit.edu\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c9800b1a2e930f65e8fa7a9b052fb80efeba512c",
      "old_mode": 33188,
      "old_path": "fs/crypto/policy.c",
      "new_id": "f96547f83cabb32dc748865f52ad5cbcd54c3da8",
      "new_mode": 33188,
      "new_path": "fs/crypto/policy.c"
    }
  ]
}