[PATCH 2/3] Audit: break a large single execve argument into smaller records

2007-10-08 Thread Eric Paris
support single arguments that are large, not just large lists of execve args. This also means we never have to get a kernel buffer larger than MAX_EXECVE_AUDIT_LEN no matter how large the argument is. Before this patch we could need to allocate 32 consecutive pages to hold one

[PATCH 2/3] Audit: break a large single execve argument into smaller records

2007-10-08 Thread Eric Paris
support single arguments that are large, not just large lists of execve args. This also means we never have to get a kernel buffer larger than MAX_EXECVE_AUDIT_LEN no matter how large the argument is. Before this patch we could need to allocate 32 consecutive pages to hold one