[Devel] [PATCH RHEL7 COMMIT] ve/netfilter/ipset: allow nfnetlink_queue module autoload

[Konstantin Khorenko]

The commit is pushed to "branch-rh7-3.10.0-957.10.1.vz7.85.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-957.10.1.vz7.85.1
------>
commit f080e9748c88597aa01268b714eace595b948f59
Author: Konstantin Khorenko <khorenko at virtuozzo.com>
Date:   Fri Mar 15 15:31:02 2019 +0300

    ve/netfilter/ipset: allow nfnetlink_queue module autoload
    
    +       "nfnetlink-subsys-3",           /* NFNL_SUBSYS_QUEUE */
    
    https://jira.sw.ru/browse/PSBM-92694
    
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index 1d2ea4fb17bb..2f40ebd4d2b2 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -396,6 +396,7 @@ static const char * const ve0_allowed_mod[] = {
 	"net-pf-16-proto-12",		/* PF_NETLINK, NETLINK_NETFILTER */
 	"nfnetlink-subsys-1",		/* NFNL_SUBSYS_CTNETLINK */
 	"nfnetlink-subsys-2",		/* NFNL_SUBSYS_CTNETLINK_EXP */
+	"nfnetlink-subsys-3",		/* NFNL_SUBSYS_QUEUE */
 
 	/* unix_diag */
 	"net-pf-16-proto-4-type-1",	/* PF_NETLINK, NETLINK_SOCK_DIAG, AF_LOCAL */