summaryrefslogtreecommitdiffstats
path: root/net/sched/act_gact.c
diff options
context:
space:
mode:
authorMichal Koutný <mkoutny@suse.com>2024-02-01 14:09:42 +0100
committerJakub Kicinski <kuba@kernel.org>2024-02-02 10:57:55 -0800
commit2c15a5aee2f32e341d1585fa1867eece76a1edb8 (patch)
tree2bd5ff1f5cc96cc16cf7454dccd16284676a7a72 /net/sched/act_gact.c
parent241a94abcf465ba9363d93168da5ddd47002930f (diff)
downloadlinux-2c15a5aee2f32e341d1585fa1867eece76a1edb8.tar.gz
linux-2c15a5aee2f32e341d1585fa1867eece76a1edb8.tar.bz2
linux-2c15a5aee2f32e341d1585fa1867eece76a1edb8.zip
net/sched: Load modules via their alias
The cls_,sch_,act_ modules may be loaded lazily during network configuration but without user's awareness and control. Switch the lazy loading from canonical module names to a module alias. This allows finer control over lazy loading, the precedent from commit 7f78e0351394 ("fs: Limit sys_mount to only request filesystem modules.") explains it already: Using aliases means user space can control the policy of which filesystem^W net/sched modules are auto-loaded by editing /etc/modprobe.d/*.conf with blacklist and alias directives. Allowing simple, safe, well understood work-arounds to known problematic software. By default, nothing changes. However, if a specific module is blacklisted (its canonical name), it won't be modprobe'd when requested under its alias (i.e. kernel auto-loading). It would appear as if the given module was unknown. The module can still be loaded under its canonical name, which is an explicit (privileged) user action. Signed-off-by: Michal Koutný <mkoutny@suse.com> Acked-by: Jamal Hadi Salim <jhs@mojatatu.com> Reviewed-by: Jiri Pirko <jiri@nvidia.com> Link: https://lore.kernel.org/r/20240201130943.19536-4-mkoutny@suse.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'net/sched/act_gact.c')
0 files changed, 0 insertions, 0 deletions