From: Konstantin Khorenko <khore...@virtuozzo.com>
ve/kmod/whitelist: List of allowed to autoload in CT modules
(non-netfilters)
Following non-netfilter modules are allowed to be autoloaded
from inside a CT:
* binfmt_misc
* fs-overlay
It's port of vz7 commits:
* 8af13e7c ("ve/kmod: list of allowed to autoload in CT modules")
(partically)
* 264ef13 ("ve/kmod/whitelist: allow overlay fs module autoloading")
https://jira.sw.ru/browse/PSBM-127787
Signed-off-by: Konstantin Khorenko <khore...@virtuozzo.com>
to merge
---
kernel/kmod.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/kernel/kmod.c b/kernel/kmod.c
index 7472184200f2..b8ca90bec921 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -231,6 +231,9 @@ static const char * const ve0_allowed_mod[] = {
"nft-set",
"nf_tproxy_ipv4",
"nf_tproxy_ipv6",
+
+ "fs-binfmt_misc",
+ "fs-overlay",
};
/*
_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel
