[RHEL7,COMMIT] ve/modules: Add ts_kmp to allowed modules

Submitted by Konstantin Khorenko on Oct. 1, 2019, 3:52 p.m.

Details

Message ID 201910011552.x91FqqK9015858@finist-ce7.sw.ru
State New
Series "modules: Add ts_kmp to allowed modules"
Headers show

Commit Message

Konstantin Khorenko Oct. 1, 2019, 3:52 p.m.
The commit is pushed to "branch-rh7-3.10.0-957.27.2.vz7.107.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git
after rh7-3.10.0-957.27.2.vz7.107.11
------>
commit f2ad675e7951848e892ff3edabfbc108df3dbecc
Author: Kirill Tkhai <ktkhai@virtuozzo.com>
Date:   Tue Oct 1 18:52:52 2019 +0300

    ve/modules: Add ts_kmp to allowed modules
    
    Otherwise rules like below can't applied from inside CT,
    when the module is not loaded.
    
    $iptables -I FORWARD -m string --string "xxxxxx" --algo kmp --to 65535 -j DROP
    
    https://jira.sw.ru/browse/PSBM-97729
    
    Signed-off-by: Kirill Tkhai <ktkhai@virtuozzo.com>
---
 kernel/kmod.c | 3 +++
 1 file changed, 3 insertions(+)

Patch hide | download patch | download mbox

diff --git a/kernel/kmod.c b/kernel/kmod.c
index a260658f3471..a4b7a539cc6e 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -447,6 +447,9 @@  static const char * const ve0_allowed_mod[] = {
 	"ip_vs_sh",
 	"ip_vs_lblcr",
 	"ip_vs_lc",
+
+	/* string */
+	"ts_kmp",
 };
 
 /*