[Devel] [PATCH RH9 13/20] ve/kmod/whitelist: Allow nfnetlink_queue module autoload from CT

[Kirill Tkhai]

From: Konstantin Khorenko <khorenko at virtuozzo.com>

+       "nfnetlink-subsys-3",           /* NFNL_SUBSYS_QUEUE */

https://jira.sw.ru/browse/PSBM-92694

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>

(cherry picked from vz7 commit 588834a3e83f
 ("ve/netfilter/ipset: allow nfnetlink_queue module autoload"))

Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c |    1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index 36115c12b46c..b84bfdf216ff 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -251,6 +251,7 @@ static const char * const ve0_allowed_mod[] = {
 	"net-pf-16-proto-12",		/* PF_NETLINK, NETLINK_NETFILTER */
 	"nfnetlink-subsys-1",		/* NFNL_SUBSYS_CTNETLINK */
 	"nfnetlink-subsys-2",		/* NFNL_SUBSYS_CTNETLINK_EXP */
+	"nfnetlink-subsys-3",		/* NFNL_SUBSYS_QUEUE */
 
 	/* unix_diag */
 	"net-pf-16-proto-4-type-1",	/* PF_NETLINK, NETLINK_SOCK_DIAG, AF_LOCAL */