[Devel] [PATCH RHEL7 COMMIT] ve/kmod/whitelist: allow overlay fs module autoloading
Konstantin Khorenko
khorenko at virtuozzo.com
Thu Sep 1 05:15:56 PDT 2016
The commit is pushed to "branch-rh7-3.10.0-327.28.2.vz7.17.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-327.28.2.vz7.17.4
------>
commit 0ad2c8d129f4d2e218a37e4a79c8c0f3f8528dc2
Author: Dmitry Safonov <dsafonov at virtuozzo.com>
Date: Thu Sep 1 16:15:55 2016 +0400
ve/kmod/whitelist: allow overlay fs module autoloading
Note: overlayfs will not be allowed to be mounted inside a CT until admin
enables experimental fs. To do it, write to the process knob:
# echo 1 > /proc/sys/fs/experimental_fs_enable
https://jira.sw.ru/browse/PSBM-51043
Signed-off-by: Dmitry Safonov <dsafonov at virtuozzo.com>
Acked-by: Kirill Tkhai <ktkhai at virtuozzo.com>
---
kernel/kmod.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/kernel/kmod.c b/kernel/kmod.c
index d2c16a9..ef74971 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -379,6 +379,7 @@ static inline int module_payload_iptable_allowed(const char *module)
/* ve0 allowed modules */
static const char * const ve0_allowed_mod[] = {
"fs-binfmt_misc",
+ "fs-overlay",
/* inet_diag, inet6_diag */
"net-pf-16-proto-4-type-2", /* PF_NETLINK, NETLINK_SOCK_DIAG, AF_INET */
More information about the Devel
mailing list