[Devel] [PATCH rh8 22/28] ve/kmod/whitelist: Allow conntrack nft-helper-* modules autoloading

Konstantin Khorenko khorenko at virtuozzo.com
Tue Apr 13 11:25:32 MSK 2021


From: Kirill Tkhai <ktkhai at virtuozzo.com>

Otherwise, in case of destination node does not have
modules loaded, CT migration fails.

https://jira.sw.ru/browse/PSBM-90319

Signed-off-by: Kirill Tkhai <ktkhai at virtuozzo.com>

(cherry picked from vz7 commit
 c92758e6ea45 ("net: Allow autoloading conntrack nft-helper-* modules"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index cd1f1f38aa56..01b5ab352249 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -338,6 +338,10 @@ bool module_payload_allowed(const char *module)
 	    !strncmp("nfct-helper-",	module, 12))
 		return true;
 
+	/* nfct-helper-* modules */
+	if (!strncmp("nfct-helper-", module, 12))
+		return true;
+
 	return false;
 }
 #endif /* CONFIG_VE */
-- 
2.28.0



More information about the Devel mailing list