[Devel] [PATCH RHEL7 COMMIT] ve/kmod/whitelist: allow overlay fs module autoloading

Konstantin Khorenko khorenko at virtuozzo.com
Thu Sep 1 05:15:56 PDT 2016


The commit is pushed to "branch-rh7-3.10.0-327.28.2.vz7.17.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-327.28.2.vz7.17.4
------>
commit 0ad2c8d129f4d2e218a37e4a79c8c0f3f8528dc2
Author: Dmitry Safonov <dsafonov at virtuozzo.com>
Date:   Thu Sep 1 16:15:55 2016 +0400

    ve/kmod/whitelist: allow overlay fs module autoloading
    
    Note: overlayfs will not be allowed to be mounted inside a CT until admin
    enables experimental fs. To do it, write to the process knob:
    # echo 1 > /proc/sys/fs/experimental_fs_enable
    
    https://jira.sw.ru/browse/PSBM-51043
    
    Signed-off-by: Dmitry Safonov <dsafonov at virtuozzo.com>
    Acked-by: Kirill Tkhai <ktkhai at virtuozzo.com>
---
 kernel/kmod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index d2c16a9..ef74971 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -379,6 +379,7 @@ static inline int module_payload_iptable_allowed(const char *module)
 /* ve0 allowed modules */
 static const char * const ve0_allowed_mod[] = {
 	"fs-binfmt_misc",
+	"fs-overlay",
 
 	/* inet_diag, inet6_diag  */
 	"net-pf-16-proto-4-type-2",	/* PF_NETLINK, NETLINK_SOCK_DIAG, AF_INET */


More information about the Devel mailing list