[RFC PATCH 0/4] KEYS: sanitize the garbage collector behavior

From: Jarkko Sakkinen

Date: Mon Nov 02 2026 - 07:16:33 EST


1. Remove key_type_dead and replace it with the regular module semantics.
2. Replace variable size workqueue items with fixed-size 64 key chunks.

The first change has user space visible effect: rmmod semantics will change
from always succeeding into returning -EBUSY when keys or restrictions have
the LKM pinned.

Jarkko Sakkinen (4):
KEYS: trusted: Disable sysfs bind attributes for TEE driver
KEYS: Pin the backing module for struct key_type
KEYS: Remove key_type_dead
KEYS: key_garbage_collector(): process in chunks

include/linux/key-type.h | 6 +-
security/keys/gc.c | 249 ++++++++---------------
security/keys/internal.h | 7 +-
security/keys/key.c | 46 +++--
security/keys/keyring.c | 84 +++-----
security/keys/trusted-keys/trusted_tee.c | 1 +
6 files changed, 148 insertions(+), 245 deletions(-)

--
2.47.3