[Devel] [PATCH rh8 19/28] ve/kmod/whitelist: Allow ip6tables_raw modules autoload upon request from CT

[Konstantin Khorenko]

From: Andrey Ryabinin <aryabinin at virtuozzo.com>

Currently autoloading of the ip6table_raw module is forbidden
from container, leading to:
     ip6tables-restore v1.4.21: ip6tables-restore: unable to initialize table 'raw'

If use of ip6tables is allowed in container, autoloading of the ip6tables_raw
has to be permitted as well.

https://jira.sw.ru/browse/PSBM-50548

Signed-off-by: Andrey Ryabinin <aryabinin at virtuozzo.com>
Acked-by: Kirill Tkhai <ktkhai at virtuozzo.com>

(cherry picked from vz7 commit 7bc4ff4c5928 ("ve/net/ip6tables: fix
autoloading of the ip6table_raw module from CT"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index f1fef8de5d44..da535e6b2517 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -211,6 +211,7 @@ static const char * const ve0_allowed_mod[] = {
 	"iptable_nat",
 	"iptable_mangle",
 	"ip6table_filter",
+	"ip6table_raw",
 	"ip6table_nat",
 	"ip6table_mangle",
 
-- 
2.28.0