[Devel] [PATCH rh8 21/28] ve/kmod/whitelist: Allow nfnetlink_queue module autoload from CT

[Konstantin Khorenko]

+       "nfnetlink-subsys-3",           /* NFNL_SUBSYS_QUEUE */

https://jira.sw.ru/browse/PSBM-92694

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>

(cherry picked from vz7 commit 588834a3e83f
 ("ve/netfilter/ipset: allow nfnetlink_queue module autoload"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index 3c43dae9f0da..cd1f1f38aa56 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -253,6 +253,7 @@ static const char * const ve0_allowed_mod[] = {
 	"net-pf-16-proto-12",		/* PF_NETLINK, NETLINK_NETFILTER */
 	"nfnetlink-subsys-1",		/* NFNL_SUBSYS_CTNETLINK */
 	"nfnetlink-subsys-2",		/* NFNL_SUBSYS_CTNETLINK_EXP */
+	"nfnetlink-subsys-3",		/* NFNL_SUBSYS_QUEUE */
 
 	/* unix_diag */
 	"net-pf-16-proto-4-type-1",	/* PF_NETLINK, NETLINK_SOCK_DIAG, AF_LOCAL */
-- 
2.28.0