[RFC PATCH 0/4] Assorted audit fixes/improvements

Some miscellaneous audit patches that layer on top of the lock/queue patch I posted earlier today. Unlike the lock/queue fix patch these patches would go into the next branch and not the stable-4.11 branch. I'll probably need to rebase the audit/next branch to merge these patches, but that is something we'll worry about when the time comes. --- Paul Moore (4): audit: combine audit_receive() and audit_receive_skb() audit: kernel generated netlink traffic should have a portid of 0 audit: store the auditd PID as a pid struct instead of pid_t audit: use kmem_cache to manage the audit_buffer cache include/linux/audit.h | 3 - kernel/audit.c | 190 ++++++++++++++++++++++--------------------------- kernel/audit.h | 5 + kernel/auditfilter.c | 14 ++-- 4 files changed, 96 insertions(+), 116 deletions(-)