[RFC PATCH 0/4] KEYS: sanitize the garbage collector behavior
From: Jarkko Sakkinen
Date: Mon Nov 02 2026 - 07:16:33 EST
1. Remove key_type_dead and replace it with the regular module semantics.
2. Replace variable size workqueue items with fixed-size 64 key chunks.
The first change has user space visible effect: rmmod semantics will change
from always succeeding into returning -EBUSY when keys or restrictions have
the LKM pinned.
Jarkko Sakkinen (4):
KEYS: trusted: Disable sysfs bind attributes for TEE driver
KEYS: Pin the backing module for struct key_type
KEYS: Remove key_type_dead
KEYS: key_garbage_collector(): process in chunks
include/linux/key-type.h | 6 +-
security/keys/gc.c | 249 ++++++++---------------
security/keys/internal.h | 7 +-
security/keys/key.c | 46 +++--
security/keys/keyring.c | 84 +++-----
security/keys/trusted-keys/trusted_tee.c | 1 +
6 files changed, 148 insertions(+), 245 deletions(-)
--
2.47.3