thread-keyring(7)      Miscellaneous Information Manual      thread-keyring(7)

NAME
       thread-keyring - per-thread keyring

DESCRIPTION
       The thread keyring is a keyring used to anchor keys on behalf of a
       process.  It is created only when a thread requests it.  The thread
       keyring has the name (description) _tid.

       A special serial number value, KEY_SPEC_THREAD_KEYRING, is defined that
       can be used in lieu of the actual serial number of the calling thread's
       thread keyring.

       From the keyctl(1) utility, '@t' can be used instead of a numeric key
       ID in much the same way, but as keyctl(1) is a program run after
       forking, this is of no utility.

       Thread keyrings are not inherited across clone(2) and fork(2) and are
       cleared by execve(2).  A thread keyring is destroyed when the thread
       that refers to it terminates.

       Initially, a thread does not have a thread keyring.  If a thread
       doesn't have a thread keyring when it is accessed, then it will be
       created if it is to be modified; otherwise the operation fails with the
       error ENOKEY.

SEE ALSO
       keyctl(1), keyctl(3), keyrings(7), persistent-keyring(7),
       process-keyring(7), session-keyring(7), user-keyring(7),
       user-session-keyring(7)

Linux man-pages 6.7               2023-10-31                 thread-keyring(7)