)]}'
{
  "commit": "f2ac7c69e2522c4327c16c461b4670ee2d8fb24e",
  "tree": "312f8838953a88a0afb18e98f11a568d2dbf07ed",
  "parents": [
    "7133b318eac657f7cc172e4aab0495688b7318dc"
  ],
  "author": {
    "name": "Victor Hsieh",
    "email": "victorhsieh@google.com",
    "time": "Thu Nov 17 16:58:10 2022 -0800"
  },
  "committer": {
    "name": "Victor Hsieh",
    "email": "victorhsieh@google.com",
    "time": "Fri Dec 16 10:24:45 2022 -0800"
  },
  "message": "Stop using fs-verity signature in odsign\n\nfs-verity digests are recorded in a signed file that contains the file\npath -\u003e digest mapping. We don\u0027t really need the extra signature check\nin kernel. Persistent attack can still be detected after a reboot. If\nthe attacker can already damage the run time integrity, the kernel\nkeyring verification can\u0027t really help by itself.\n\nActually, the signature was originally added because we required\nsignature for fs-verity, but it has been relaxed since aosp/2281348.\n\nBug: 258061812\nTest: atest odsign_e2e_tests_full\nChange-Id: Id0f05055945999fe18d056d89a6f9059807bcee8\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d5c7299f441c6cf4593c9300447809ab10841744",
      "old_mode": 33188,
      "old_path": "ondevice-signing/VerityUtils.cpp",
      "new_id": "0b631daa62010eaaa1f500bfb64bd8ab6eed308b",
      "new_mode": 33188,
      "new_path": "ondevice-signing/VerityUtils.cpp"
    },
    {
      "type": "modify",
      "old_id": "e6e49c7df49487691afedda7ce5e347743e3cb0b",
      "old_mode": 33188,
      "old_path": "ondevice-signing/include/VerityUtils.h",
      "new_id": "626bbdb4f5c75ab6ab0881e94ef166abb6a686ce",
      "new_mode": 33188,
      "new_path": "ondevice-signing/include/VerityUtils.h"
    },
    {
      "type": "modify",
      "old_id": "93ec3e419804a9e494fde39f9ac41b5d0b1a0fcb",
      "old_mode": 33188,
      "old_path": "ondevice-signing/odsign_main.cpp",
      "new_id": "9571fa97b8bce7f45ce5f3e0cd84f9c38b7f8d4f",
      "new_mode": 33188,
      "new_path": "ondevice-signing/odsign_main.cpp"
    }
  ]
}