[Devel] [PATCH rh8 13/28] ve/kmod/whitelist: List of allowed to autoload in CT modules (non-netfilters)

[Konstantin Khorenko]

Following non-netfilter modules are allowed to be autoloaded
from inside a CT:
 * binfmt_misc
 * fs-overlay

It's port of vz7 commits:
* 8af13e7c ("ve/kmod: list of allowed to autoload in CT modules")
	   (partically)
* 264ef13  ("ve/kmod/whitelist: allow overlay fs module autoloading")

https://jira.sw.ru/browse/PSBM-127787

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>

to merge
---
 kernel/kmod.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index b414c6dcd6f4..0edf2abd1362 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -233,6 +233,9 @@ static const char * const ve0_allowed_mod[] = {
 	"nft-set",
 	"nf_tproxy_ipv4",
 	"nf_tproxy_ipv6",
+
+	"fs-binfmt_misc",
+	"fs-overlay",
 };
 
 /*
-- 
2.28.0