[Devel] [PATCH RH9 05/20] commit da8c1e2262f8

[Kirill Tkhai]

From: Konstantin Khorenko <khorenko at virtuozzo.com>

    ve/kmod/whitelist: List of allowed to autoload in CT modules (non-netfilters)

    Following non-netfilter modules are allowed to be autoloaded
    from inside a CT:
     * binfmt_misc
     * fs-overlay

    It's port of vz7 commits:
    * 8af13e7c ("ve/kmod: list of allowed to autoload in CT modules")
               (partically)
    * 264ef13  ("ve/kmod/whitelist: allow overlay fs module autoloading")

    https://jira.sw.ru/browse/PSBM-127787

    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>

    to merge
---
 kernel/kmod.c |    3 +++
 1 file changed, 3 insertions(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index 7472184200f2..b8ca90bec921 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -231,6 +231,9 @@ static const char * const ve0_allowed_mod[] = {
 	"nft-set",
 	"nf_tproxy_ipv4",
 	"nf_tproxy_ipv6",
+
+	"fs-binfmt_misc",
+	"fs-overlay",
 };
 
 /*