[Devel] [PATCH RHEL7 COMMIT] ve/kmod, nf_tables: allow nf_tables.ko autoloading on request from ve.

[Konstantin Khorenko]

The commit is pushed to "branch-rh7-3.10.0-1062.1.2.vz7.114.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-1062.1.2.vz7.114.5
------>
commit 081f6e9e8f7b3a18a3879eec2f8654492340707a
Author: Andrey Ryabinin <aryabinin at virtuozzo.com>
Date:   Tue Oct 15 18:54:54 2019 +0300

    ve/kmod, nf_tables: allow nf_tables.ko autoloading on request from ve.
    
    Allow nf_tables.ko module autloading from CT. Needed for iptables in centos 8.
    
    https://jira.sw.ru/browse/PSBM-98211
    Signed-off-by: Andrey Ryabinin <aryabinin at virtuozzo.com>
---
 kernel/kmod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index a4b7a539cc6e..93d6b94c6741 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -282,6 +282,7 @@ static struct {
 	{ "nf_conntrack-10",	VE_NF_CONNTRACK|VE_IP_CONNTRACK },
 	{ "nf_conntrack_ipv6",	VE_NF_CONNTRACK|VE_IP_CONNTRACK },
 
+	{ "nfnetlink-subsys-10",VE_IP_IPTABLES			}, /* nf_tables */
 	{ "nft-set",		VE_IP_IPTABLES			},
 	{ "nft-afinfo-2",	VE_IP_IPTABLES			}, /* IPV4 */
 	{ "nft-afinfo-3",	VE_IP_IPTABLES			}, /* ARP  */