Re: [Part1 PATCH 00/22] Add namespace support for audit

This patchset is first part of namespace support for audit. in this patchset, the mainly resources of audit system have been isolated. the audit filter, rules havn't been isolated now. It will be implemented in Part2. We finished the isolation of user audit message in this patchset. I choose to assign audit to the user namespace. Right now,there are six kinds of namespaces, such as net, mount, ipc, pid, uts and user. the first five namespaces have special usage. the audit isn't suitable to belong to these five namespaces, And since the flag of system call clone is in short supply, we can't provide a new flag such as CLONE_NEWAUDIT to enable audit namespace separately. so the user namespace may be the best choice.