From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-yx2-f9.google.com (mail-yx2-f9.google.com [74.125.224.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0182748F839 for ; Mon, 14 Sep 2026 16:42:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.224.137 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789404129; cv=none; b=DdafCLwSqEszdGRpyPyP0LPCvdcgN4h8I1q8Y1t/cYg4T4MbGvzgkPr1qzhze1DYj1FJfl36uXBI1ITE9pltLX6pif5sPFCPq/gdvdmi110589t6pEEav3e7zkM5lVizbQ9MRTdEhkVcl7zVisy7296NlDVibJOvAjeW5VxE4vg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789404129; c=relaxed/simple; bh=fyPrl3WvozGTDDVsDO8MGVfKnhRCs2T8g6qKeea9uQc=; h=From:Date:Subject:MIME-Version:Content-Type:Message-Id:References: In-Reply-To:To:Cc; b=Gfzq4VpDIqa49ZXxv4zomufwVzzPJNOMU/I2R6ASQNC5gCF+EIA6uGSC8DrCpKr27sPWfRyyFiMXIGXYP/+9Nf9G4+mdm9CkcgajvU5vN6wdlyjGS19Kam1KHfBk8TphGNhEzsC+wS5rXLrho851tRkUrpb0/tHEiZjWPQeF4ys= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=amutable.com; spf=pass smtp.mailfrom=amutable.com; dkim=pass (2048-bit key) header.d=amutable-com.20251104.gappssmtp.com header.i=@amutable-com.20251104.gappssmtp.com header.b=f5lMeVgu; arc=none smtp.client-ip=74.125.224.137 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=amutable.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=amutable.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=amutable-com.20251104.gappssmtp.com header.i=@amutable-com.20251104.gappssmtp.com header.b="f5lMeVgu" Received: by mail-yx2-f9.google.com with SMTP id 956f58d0204a3-66e5f4dc13bso944252d50.1 for ; Mon, 14 Sep 2026 09:42:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amutable-com.20251104.gappssmtp.com; s=20251104; t=1789404124; x=1790008924; darn=vger.kernel.org; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :content-type:mime-version:subject:date:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=ndMM0TFrryHnZOvHnxhOWJr9tGmJVwIhyX6o7UKbX40=; b=f5lMeVguGh1mH4Nna49X7IZNiBsDiRwwgHAAwhJRQY+ZByij2jyEx4lsK54K5OA2+e jFm9UiDUQT3kDyC5tHE/XGiNnorfF2b4xKZPEvrPqNyY0+M2Hgz/zCdPva7/qr/9dOOm UfQzb0QXf+wLNVjOK6HTBvlVi0SsMFokmKKGN5+bduK+hDLiRorkhsn+7G7qYXHj2siE beLXJ/xcGk867HZ5ZqoElH6M34ATJo2y9mFIG4m878j12sup1h1i0S/LryjR/yf3yBHv LLAqBHUl72QrDEwXVRhWS0cv2jeK0+wGMdBDFwu3ZMOQ2VNx0SBCK4ibsE4f/lm5Ur4n 6cyQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1789404124; x=1790008924; h=cc:to:in-reply-to:references:message-id:content-transfer-encoding :content-type:mime-version:subject:date:from:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=ndMM0TFrryHnZOvHnxhOWJr9tGmJVwIhyX6o7UKbX40=; b=gC6FmIDI5DEiPEVjK6PWj7QJFJUUrfHN9Vr5IDUsxULznjeVQgEx6HN5//LRTbYorp wnGF3zKYiTASij2O6HW80CHIz8mqXRIc21pLlTwv5AMFfHlIZ9oZDj1NrYJ1cbPzdH59 pg2XmvgiuecxcqwntHfyQGfr5DBd1VBq7FgnDxYEP2PiImxgMKDogdkfv5vNfIfwksDS 1EfUOWqb7dkbVj5acbUlDhRz6J5uiZgodNl/R2vE+skE00AKe+fzhUlXKsGjbHdziw6v B4ak5uJy9Cx0PGRfdYA96IeE5EgeTVqZGw6okOrTYneYJquKVfKzY724P5Rbl9XLBKnz oxKA== X-Forwarded-Encrypted: i=1; AKwUvByco29bn+YjH9JyjuMvU9mPTjhD0wJTj6vbuoRV3PHzPFuzYzum+rzXKRoqOS3g/nChUtKDY60VfmVQUWM=@vger.kernel.org X-Gm-Message-State: AFuF++mk2g27w63WKdFz9+TVfk++oC4Eq8aHSzZdSc4Jt+5LnY2+De0o JeuDQbGpTnIbhzsO0II++6AHZpCpcs2xeVZW8IM26w0YbWvyyw9PvkGVg0mC6uR3Y42y X-Gm-Gg: AYBFou0/WEa93EuS2biatRetKIlIN/DXGaw6Kt7FWm3IAwYPlgr0zIBreCRoZcdF80E Bl7HT8BhC/8dQoA6Cq5aReJjslAK5RB8u+eJMzU8fRzKSBoPBpDrQ77Bl+Fof05RuoPhO6yXh1a WZm3stUSbE2gpGav3k1hHf+UqdsSkCUWZ8nG8P++oAobNNpJwnwRDnOnteMx4Zx1Uo5nnG5BM28 0628k9rnIjmn9VAv+r+P2LPHtwT47RfXYKxhOuwzFgHBaB1sO1zcd/ODgSjOClU7D9XDqXVL6md kQINFsMDcPiJGhHzlH18G9Qo+kBOFZVqxAdrvIxlajNrmFjlEsEU/2MJwwbDaDjefHRxwAdz1ax P9MuJzwcBnJTczAT4e32HcTt5lGt3h/vWuCF1Z0ymy1gtaaZPSXuUK8sWaIojmnS6+kn8AfgBgG V9F+H9SM2As/991HuXv7gyRKxqxmMUA8vWRj9XPjYl5BZpNTdDI5L2Bvlgm45j X-Received: by 2002:a05:690e:810:20b0:671:4a9e:7c91 with SMTP id 956f58d0204a3-6714dfd252cmr743318d50.10.1789404124390; Mon, 14 Sep 2026 09:42:04 -0700 (PDT) Received: from [192.168.1.110] ([2600:1700:1ff0:d0ef::d15]) by smtp.gmail.com with ESMTPSA id 956f58d0204a3-67125df42a8sm4879023d50.8.2026.09.14.09.42.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 14 Sep 2026 09:42:04 -0700 (PDT) From: Andrew Halaney Date: Mon, 14 Sep 2026 11:41:44 -0500 Subject: [PATCH 3/3] Documentation: keys: document IDs added since KEY_SPEC_REQKEY_AUTH_KEY Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <20260914-ajhalaney-dmverity-key-identifier-v1-3-01922dc1366a@amutable.com> References: <20260914-ajhalaney-dmverity-key-identifier-v1-0-01922dc1366a@amutable.com> In-Reply-To: <20260914-ajhalaney-dmverity-key-identifier-v1-0-01922dc1366a@amutable.com> To: Alasdair Kergon , Mike Snitzer , Mikulas Patocka , Benjamin Marzinski , David Howells , Jarkko Sakkinen , Paul Moore , James Morris , "Serge E. Hallyn" , Eric Biggers , "Theodore Y. Ts'o" , Jonathan Corbet , Shuah Khan , Randy Dunlap Cc: dm-devel@lists.linux.dev, linux-kernel@vger.kernel.org, keyrings@vger.kernel.org, linux-security-module@vger.kernel.org, bpf@vger.kernel.org, fsverity@lists.linux.dev, linux-doc@vger.kernel.org, Andrew Halaney , "Christian Brauner (Amutable)" X-Mailer: b4 0.14.3 The table of special key IDs stops at KEY_SPEC_REQKEY_AUTH_KEY. Fill in all the new ones. Suggested-by: Christian Brauner (Amutable) Signed-off-by: Andrew Halaney --- Documentation/security/keys/core.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/Documentation/security/keys/core.rst b/Documentation/security/keys/core.rst index 326b8a973828..37ed42382f16 100644 --- a/Documentation/security/keys/core.rst +++ b/Documentation/security/keys/core.rst @@ -372,6 +372,19 @@ process making the call:: KEY_SPEC_GROUP_KEYRING -6 GID-specific keyring KEY_SPEC_REQKEY_AUTH_KEY -7 assumed request_key() authorisation key + KEY_SPEC_REQUESTOR_KEYRING -8 request_key() destination + keyring + +There are also values that refer to a specific kernel keyring rather than to +anything belonging to the caller. These keyrings are not linked into any +keyring, so a search cannot reach them and the ID is the only way to name +one:: + + CONSTANT VALUE KEY REFERENCED + ============================== ====== =========================== + KEY_SPEC_BPF_KEYRING -9 the ".bpf" keyring + KEY_SPEC_DM_VERITY_KEYRING -10 the ".dm-verity" keyring + KEY_SPEC_FS_VERITY_KEYRING -11 the ".fs-verity" keyring The main syscalls are: -- 2.55.0