[PATCH 0/3] Buffer audit messages directly to skb

The following series writes audit messages directly to skb rather than formatting to a tmp buffer, and copying to some number of skbs (potentially fragmenting the message across skbs). This is done in three steps. 1) audit-buffer-alloc.patch - adds simpler alloc/free helper functions 2) audit-buffer-expand.patch - moves to a dynamic tmp buffer which can be expanded as needed. copy message to a single skb. 3) audit-buffer-skb.patch - eliminate tmp buffer and write directly to skb. kernel/audit.c | 232 ++++++++++++++++++++++++++++----------------------------- 1 files changed, 118 insertions(+), 114 deletions(-) thanks, -chris