From: Andrey Ryabinin <ryabinin....@gmail.com>
Currently autoloading of the ip6table_raw module is forbidden
from container, leading to:
ip6tables-restore v1.4.21: ip6tables-restore: unable to initialize table
'raw'
If use of ip6tables is allowed in container, autoloading of the ip6tables_raw
has to be permitted as well.
https://jira.sw.ru/browse/PSBM-50548
Signed-off-by: Andrey Ryabinin <aryabi...@virtuozzo.com>
Acked-by: Kirill Tkhai <ktk...@virtuozzo.com>
(cherry picked from vz7 commit 7bc4ff4c5928 ("ve/net/ip6tables: fix
autoloading of the ip6table_raw module from CT"))
Signed-off-by: Konstantin Khorenko <khore...@virtuozzo.com>
---
kernel/kmod.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/kernel/kmod.c b/kernel/kmod.c
index 6acc4d943283..6544d56a3f96 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -209,6 +209,7 @@ static const char * const ve0_allowed_mod[] = {
"iptable_nat",
"iptable_mangle",
"ip6table_filter",
+ "ip6table_raw",
"ip6table_nat",
"ip6table_mangle",
_______________________________________________
Devel mailing list
Devel@openvz.org
https://lists.openvz.org/mailman/listinfo/devel
