process-keyring(7) — Linux manual page

NAME | DESCRIPTION | SEE ALSO | COLOPHON

process-keyring(7)   Miscellaneous Information Manual  process-keyring(7)

NAME         top

       process-keyring - per-process shared keyring

DESCRIPTION         top

       The process keyring is a keyring used to anchor keys on behalf of
       a process.  It is created only when a process requests it.  The
       process keyring has the name (description) _pid.

       A special serial number value, KEY_SPEC_PROCESS_KEYRING, is
       defined that can be used in lieu of the actual serial number of
       the calling process's process keyring.

       From the keyctl(1) utility, '@p' can be used instead of a numeric
       key ID in much the same way, but since keyctl(1) is a program run
       after forking, this is of no utility.

       A thread created using the clone(2) CLONE_THREAD flag has the same
       process keyring as the caller of clone(2).  When a new process is
       created using fork() it initially has no process keyring.  A
       process's process keyring is cleared on execve(2).  The process
       keyring is destroyed when the last thread that refers to it
       terminates.

       If a process doesn't have a process keyring when it is accessed,
       then the process keyring will be created if the keyring is to be
       modified; otherwise, the error ENOKEY results.

SEE ALSO         top

       keyctl(1), keyctl(3), keyrings(7), persistent-keyring(7),
       session-keyring(7), thread-keyring(7), user-keyring(7),
       user-session-keyring(7)

COLOPHON         top

       This page is part of the man-pages (Linux kernel and C library
       user-space interface documentation) project.  Information about
       the project can be found at 
       ⟨https://www.kernel.org/doc/man-pages/⟩.  If you have a bug report
       for this manual page, see
       ⟨https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/tree/CONTRIBUTING⟩.
       This page was obtained from the tarball man-pages-6.10.tar.gz
       fetched from
       ⟨https://mirrors.edge.kernel.org/pub/linux/docs/man-pages/⟩ on
       2025-02-02.  If you discover any rendering problems in this HTML
       version of the page, or you believe there is a better or more up-
       to-date source for the page, or you have corrections or
       improvements to the information in this COLOPHON (which is not
       part of the original manual page), send a mail to
       [email protected]

Linux man-pages 6.10            2024-05-02             process-keyring(7)

Pages that refer to this page: add_key(2)keyctl(2)KEYCTL_GET_KEYRING_ID(2const)KEYCTL_SET_REQKEY_KEYRING(2const)request_key(2)keyrings(7)keyutils(7)persistent-keyring(7)session-keyring(7)thread-keyring(7)user-keyring(7)user-session-keyring(7)