)]}'
{
  "commit": "69eac8481741b1474eac7c459768c94bb94430e1",
  "tree": "dd0ac7ac8967ffa3ceb8ab3ad1811f24e265fd8f",
  "parents": [
    "a9547379cb381e2a036e3261a6becc17973ac470",
    "c349b233d6ab0fc3517401a1e2d36f5f90eb8c9b"
  ],
  "author": {
    "name": "Linus Torvalds",
    "email": "torvalds@linux-foundation.org",
    "time": "Fri Oct 30 13:38:02 2026 -1000"
  },
  "committer": {
    "name": "Linus Torvalds",
    "email": "torvalds@linux-foundation.org",
    "time": "Fri Oct 30 13:38:02 2026 -1000"
  },
  "message": "Merge tag \u0027fsverity-for-linus\u0027 of git://git.kernel.org/pub/scm/fs/fsverity/linux\n\nPull fsverity fixes from Eric Biggers:\n \"Fixes for several bugs found by LLMs:\n\n   - Fix bypass of IPE\u0027s fsverity support, and a use-after-free in\n     certain cases, when FS_IOC_ENABLE_VERITY fails when almost done\n\n   - Fix FS_IOC_MEASURE_VERITY and FS_IOC_READ_VERITY_METADATA to no\n     longer bypass Landlock and AppArmor\u0027s read permission checks\n\n   - Be robust against the filesystem returning different values for a\n     file\u0027s verity descriptor length in two successive queries\"\n\n* tag \u0027fsverity-for-linus\u0027 of git://git.kernel.org/pub/scm/fs/fsverity/linux:\n  fsverity: Set S_VERITY only after rollback is no longer possible\n  fsverity: Tell LSMs about signature only after verity is enabled\n  fsverity: Be more careful with return value of -\u003eget_verity_descriptor()\n  fsverity: Explicitly require FMODE_READ to retrieve hashes\n",
  "tree_diff": []
}