On Thursday, December 18, 2014 02:04:46 PM Eric Paris wrote:
 I'd suggest just sending the GFP type, not the who audit_buffer,
but
 that's up to you. 
That would be my preference too, especially since we will want to send this to 
stable and smaller is generally better there.
-- 
paul moore
security and virtualization @ redhat