process-keyring(7) Miscellaneous Information Manualprocess-keyring(7)process-keyring - per-process shared keyring
The process keyring is a keyring used to anchor keys on behalf of a process. It is created only when a process requests it. The process keyring has the name (description)_pid. A special serial number value,KEY_SPEC_PROCESS_KEYRING, is defined that can be used in lieu of the actual serial number of the calling process's process keyring. From thekeyctl(1) utility, '@p' can be used instead of a numeric key ID in much the same way, but sincekeyctl(1) is a program run after forking, this is of no utility. A thread created using theclone(2)CLONE_THREADflag has the same process keyring as the caller ofclone(2). When a new process is created usingfork() it initially has no process keyring. A process's process keyring is cleared onexecve(2). The process keyring is destroyed when the last thread that refers to it terminates. If a process doesn't have a process keyring when it is accessed, then the process keyring will be created if the keyring is to be modified; otherwise, the errorENOKEYresults.
keyctl(1),keyctl(3),keyrings(7),persistent-keyring(7),session-keyring(7),thread-keyring(7),user-keyring(7),user-session-keyring(7)
This page is part of theman-pages (Linux kernel and C library user-space interface documentation) project. Information about the project can be found at ⟨https://www.kernel.org/doc/man-pages/⟩. If you have a bug report for this manual page, see ⟨https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/tree/CONTRIBUTING⟩. This page was obtained from the tarball man-pages-6.15.tar.gz fetched from ⟨https://mirrors.edge.kernel.org/pub/linux/docs/man-pages/⟩ on 2025-08-11. If you discover any rendering problems in this HTML version of the page, or you believe there is a better or more up- to-date source for the page, or you have corrections or improvements to the information in this COLOPHON (which isnot part of the original manual page), send a mail to man-pages@man7.orgLinux man-pages 6.15 2025-05-17process-keyring(7)Pages that refer to this page:add_key(2), keyctl(2), KEYCTL_GET_KEYRING_ID(2const), KEYCTL_SET_REQKEY_KEYRING(2const), request_key(2), keyrings(7), keyutils(7), persistent-keyring(7), session-keyring(7), thread-keyring(7), user-keyring(7), user-session-keyring(7)
HTML rendering created 2025-09-06 byMichael Kerrisk, author ofThe Linux Programming Interface. For details of in-depthLinux/UNIX system programming training courses that I teach, lookhere. Hosting byjambit GmbH. | ![]() |