thread-keyring(7) [linux man page]

THREAD-KEYRING(7)					     Linux Programmer's Manual						 THREAD-KEYRING(7)

NAME

       thread-keyring - per-thread keyring

DESCRIPTION

       The  thread  keyring  is  a  keyring used to anchor keys on behalf of a process.  It is created only when a thread requests it.	The thread
       keyring has the name (description) _tid.

       A special serial number value, KEY_SPEC_THREAD_KEYRING, is defined that can be used in lieu of the actual  serial  number  of  the  calling
       thread's thread keyring.

       From  the  keyctl(1)  utility,  '@t'  can be used instead of a numeric key ID in much the same way, but as keyctl(1) is a program run after
       forking, this is of no utility.

       Thread keyrings are not inherited across clone(2) and fork(2) and are cleared by execve(2).  A thread keyring is destroyed when the  thread
       that refers to it terminates.

       Initially, a thread does not have a thread keyring.  If a thread doesn't have a thread keyring when it is accessed, then it will be created
       if it is to be modified; otherwise the operation fails with the error ENOKEY.

SEE ALSO

       keyctl(1), keyctl(3), keyrings(7), persistent-keyring(7), process-keyring(7), session-keyring(7), user-keyring(7), user-session-keyring(7)

Linux								    2017-03-13							 THREAD-KEYRING(7)

PROCESS-KEYRING(7)					     Linux Programmer's Manual						PROCESS-KEYRING(7)

NAME

       process-keyring - per-process shared keyring

DESCRIPTION

       The  process  keyring is a keyring used to anchor keys on behalf of a process.  It is created only when a process requests it.  The process
       keyring has the name (description) _pid.

       A special serial number value, KEY_SPEC_PROCESS_KEYRING, is defined that can be used in lieu of the actual serial  number  of  the  calling
       process's process keyring.

       From  the  keyctl(1) utility, '@p' can be used instead of a numeric key ID in much the same way, but since keyctl(1) is a program run after
       forking, this is of no utility.

       A thread created using the clone(2) CLONE_THREAD flag has the same process keyring as the caller of clone(2).  When a new process  is  cre-
       ated  using  fork()  it	initially  has	no  process keyring.  A process's process keyring is cleared on execve(2).  The process keyring is
       destroyed when the last thread that refers to it terminates.

       If a process doesn't have a process keyring when it is accessed, then the process keyring will be created if the keyring is to be modified;
       otherwise, the error ENOKEY results.

SEE ALSO

       keyctl(1), keyctl(3), keyrings(7), persistent-keyring(7), session-keyring(7), thread-keyring(7), user-keyring(7), user-session-keyring(7)

Linux								    2017-03-13							PROCESS-KEYRING(7)