)]}'
{
  "commit": "5828cfc8d88903477dc4cfd5745f1890dd8bc080",
  "tree": "10b73bfef801dcc64825120d79de50a4f951177c",
  "parents": [
    "99d55c8e592a84d3e0cf16f877d54a0ff52e5fd3"
  ],
  "author": {
    "name": "Jeff Layton",
    "email": "jlayton@kernel.org",
    "time": "Mon Apr 17 12:55:51 2023 -0400"
  },
  "committer": {
    "name": "COS Cherry Picker",
    "email": "cloud-image-release@prod.google.com",
    "time": "Fri Dec 15 01:45:32 2023 -0800"
  },
  "message": "IMA: use vfs_getattr_nosec to get the i_version\n\nIMA currently accesses the i_version out of the inode directly when it\ndoes a measurement. This is fine for most simple filesystems, but can be\nproblematic with more complex setups (e.g. overlayfs).\n\nMake IMA instead call vfs_getattr_nosec to get this info. This allows\nthe filesystem to determine whether and how to report the i_version, and\nshould allow IMA to work properly with a broader class of filesystems in\nthe future.\n\nBUG\u003db/314212897\nTEST\u003dpresubmit, benchmark in https://lore.kernel.org/stable/CAJc0_fz4LEyNT2rB7KAsAZuym8TT3DZLEfFqSoBigs-316LNKQ@mail.gmail.com/T/#mfd334cd7926076823fffc293b8cdd1badddde945\nRELEASE_NOTE\u003dNone\n\ncos-patch: bug\nReported-and-Tested-by: Stefan Berger \u003cstefanb@linux.ibm.com\u003e\nReviewed-by: Christian Brauner \u003cbrauner@kernel.org\u003e\nChange-Id: Ib24411484524d9e125fe718bde755b5204da67e9\nSigned-off-by: Jeff Layton \u003cjlayton@kernel.org\u003e\nSigned-off-by: Mimi Zohar \u003czohar@linux.ibm.com\u003e\n(cherry picked from commit db1d1e8b9867aae5c3e61ad7859abfcc4a6fd6c7)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/62383\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "4f39fb93f278a052df82d1f3e78a9bb321526863",
      "old_mode": 33188,
      "old_path": "security/integrity/ima/ima_api.c",
      "new_id": "0fc963b520615729133f693f406015d796b4ff24",
      "new_mode": 33188,
      "new_path": "security/integrity/ima/ima_api.c"
    },
    {
      "type": "modify",
      "old_id": "e9d7476661a3efd3d91191893aff762a09115a77",
      "old_mode": 33188,
      "old_path": "security/integrity/ima/ima_main.c",
      "new_id": "a00f1d9f9713f335e1090606f0ca49491bad054c",
      "new_mode": 33188,
      "new_path": "security/integrity/ima/ima_main.c"
    }
  ]
}