[PATCH 0/3] Buffer audit messages directly to skb

Chris Wright chrisw at osdl.org
Fri May 6 07:51:44 UTC 2005


The following series writes audit messages directly to skb rather
than formatting to a tmp buffer, and copying to some number of skbs
(potentially fragmenting the message across skbs).  This is done in
three steps.

1) audit-buffer-alloc.patch  - adds simpler alloc/free helper functions
2) audit-buffer-expand.patch - moves to a dynamic tmp buffer which can
be expanded as needed.  copy message to a single skb.
3) audit-buffer-skb.patch    - eliminate tmp buffer and write directly to skb.

 kernel/audit.c |  232 ++++++++++++++++++++++++++++-----------------------------
 1 files changed, 118 insertions(+), 114 deletions(-)

thanks,
-chris




More information about the Linux-audit mailing list