[Devel] [PATCH RHEL7 COMMIT] ve/kmod: allow NETLINK_CRYPTO sockets to autoload crypto_user module

Konstantin Khorenko khorenko at virtuozzo.com
Thu Jun 15 20:04:00 MSK 2023


The commit is pushed to "branch-rh7-3.10.0-1160.90.1.vz7.200.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-1160.90.1.vz7.200.1
------>
commit f17f2deef966e073a61cd910f5d83f359a4460f3
Author: Konstantin Khorenko <khorenko at virtuozzo.com>
Date:   Fri Jun 9 17:20:14 2023 +0300

    ve/kmod: allow NETLINK_CRYPTO sockets to autoload crypto_user module
    
    Allow module crypto_user (alias "net-pf-16-proto-21") to be autoloaded,
    this is required by RHEL9.2 kernel compilation in RHEL9 env because of
    new sha512hmac which uses NETLINK_CRYPTO sockets.
    
    https://jira.vzint.dev/browse/PSBM-147375
    
    Signed-off-by: Konstantin Khorenko <khorenko at virtuozzo.com>
---
 kernel/kmod.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index a357d0b89817..ecaa2ffb6ee5 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -477,6 +477,7 @@ static const char * const ve0_allowed_mod[] = {
 
 	/* nfnetlink  */
 	"net-pf-16-proto-12",		/* PF_NETLINK, NETLINK_NETFILTER */
+	"net-pf-16-proto-21",		/* PF_NETLINK, NETLINK_CRYPTO */
 	"nfnetlink-subsys-1",		/* NFNL_SUBSYS_CTNETLINK */
 	"nfnetlink-subsys-2",		/* NFNL_SUBSYS_CTNETLINK_EXP */
 	"nfnetlink-subsys-3",		/* NFNL_SUBSYS_QUEUE */


More information about the Devel mailing list