NAME

       process-keyring - Per-process shared keyring

DESCRIPTION

       The  process  keyring is a keyring used to anchor keys on behalf of a process.  It is only
       created when a process requests it.

       A special serial number value, KEY_SPEC_PROCESS_KEYRING, is defined that can  be  used  in
       lieu of the calling process's process keyring's actual serial number.

       From  the  keyctl  utility,  '@p' can be used instead of a numeric key ID in much the same
       way, but as keyctl is a program run after forking, this is of no utility.

       A process's process keyring is inherited across clone() with CLONE_THREAD and  is  cleared
       by execve().  The process keyring will be destroyed when the last thread that refers to it
       exits.

       If a process doesn't have a process keyring when it is accessed, then the process  keyring
       will be created if the keyring is to be modified, otherwise error ENOKEY will be issued.

SEE ALSO

       keyctl(1),
       keyctl(3),
       keyrings(7),
       thread-keyring(7),
       process-keyring(7),
       session-keyring(7),
       user-keyring(7),
       user-session-keyring(7),
       persistent-keyring(7)