[RFC PATCH 0/4] Assorted audit fixes/improvements

[Paul Moore]

Some miscellaneous audit patches that layer on top of the lock/queue
patch I posted earlier today.  Unlike the lock/queue fix patch these
patches would go into the next branch and not the stable-4.11 branch.

I'll probably need to rebase the audit/next branch to merge these
patches, but that is something we'll worry about when the time comes.

---

Paul Moore (4):
      audit: combine audit_receive() and audit_receive_skb()
      audit: kernel generated netlink traffic should have a portid of 0
      audit: store the auditd PID as a pid struct instead of pid_t
      audit: use kmem_cache to manage the audit_buffer cache


 include/linux/audit.h |    3 -
 kernel/audit.c        |  190 ++++++++++++++++++++++---------------------------
 kernel/audit.h        |    5 +
 kernel/auditfilter.c  |   14 ++--
 4 files changed, 96 insertions(+), 116 deletions(-)