[Devel] [PATCH RH9 11/20] ve/kmod/whitelist: Allow ip6tables_raw modules autoload upon request from CT

[Kirill Tkhai]

From: Andrey Ryabinin <ryabinin.a.a at gmail.com>

Currently autoloading of the ip6table_raw module is forbidden
from container, leading to:
     ip6tables-restore v1.4.21: ip6tables-restore: unable to initialize table 'raw'

If use of ip6tables is allowed in container, autoloading of the ip6tables_raw
has to be permitted as well.

https://jira.sw.ru/browse/PSBM-50548

Signed-off-by: Andrey Ryabinin <aryabinin at virtuozzo.com>
Acked-by: Kirill Tkhai <ktkhai at virtuozzo.com>

(cherry picked from vz7 commit 7bc4ff4c5928 ("ve/net/ip6tables: fix
autoloading of the ip6table_raw module from CT"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c |    1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index 6acc4d943283..6544d56a3f96 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -209,6 +209,7 @@ static const char * const ve0_allowed_mod[] = {
 	"iptable_nat",
 	"iptable_mangle",
 	"ip6table_filter",
+	"ip6table_raw",
 	"ip6table_nat",
 	"ip6table_mangle",