1PROCESS-KEYRING(7)         Linux Programmer's Manual        PROCESS-KEYRING(7)
2
3
4

NAME

6       process-keyring - per-process shared keyring
7

DESCRIPTION

9       The  process  keyring  is  a keyring used to anchor keys on behalf of a
10       process.  It is created only when a process requests it.   The  process
11       keyring has the name (description) _pid.
12
13       A  special  serial  number  value, KEY_SPEC_PROCESS_KEYRING, is defined
14       that can be used in lieu of the actual serial  number  of  the  calling
15       process's process keyring.
16
17       From  the  keyctl(1) utility, '@p' can be used instead of a numeric key
18       ID in much the same way, but since keyctl(1) is  a  program  run  after
19       forking, this is of no utility.
20
21       A  thread  created  using  the  clone(2) CLONE_THREAD flag has the same
22       process keyring as the caller of clone(2).  When a new process is  cre‐
23       ated  using  fork()  it  initially has no process keyring.  A process's
24       process keyring is cleared on execve(2).  The process  keyring  is  de‐
25       stroyed when the last thread that refers to it terminates.
26
27       If  a  process doesn't have a process keyring when it is accessed, then
28       the process keyring will be created if the keyring is to  be  modified;
29       otherwise, the error ENOKEY results.
30

SEE ALSO

32       keyctl(1), keyctl(3), keyrings(7), persistent-keyring(7),
33       session-keyring(7), thread-keyring(7), user-keyring(7),
34       user-session-keyring(7)
35

COLOPHON

37       This page is part of release 5.13 of the Linux man-pages project.  A
38       description of the project, information about reporting bugs, and the
39       latest version of this page, can be found at
40       https://www.kernel.org/doc/man-pages/.
41
42
43
44Linux                             2020-08-13                PROCESS-KEYRING(7)
Impressum