Re: [RFC PATCH 0/4] KEYS: sanitize the garbage collector behavior

From: Jarkko Sakkinen

Date: Mon Nov 02 2026 - 19:05:24 EST


On Mon, Nov 02, 2026 at 02:15:11PM +0200, Jarkko Sakkinen wrote:
> 1. Remove key_type_dead and replace it with the regular module semantics.
> 2. Replace variable size workqueue items with fixed-size 64 key chunks.
>
> The first change has user space visible effect: rmmod semantics will change
> from always succeeding into returning -EBUSY when keys or restrictions have
> the LKM pinned.
>
> Jarkko Sakkinen (4):
> KEYS: trusted: Disable sysfs bind attributes for TEE driver
> KEYS: Pin the backing module for struct key_type
> KEYS: Remove key_type_dead
> KEYS: key_garbage_collector(): process in chunks

This turned into patch set consisting of 10 kernel patches. It will
take a bit to get them out as I'm still polishing them.

I thought that it would hard to project beforhand all the possible
corner cases so I made the first version a probe version, so that
Sashiko would expose them at plain sight.

Doing this was definitely worth it, as it would have been almost
impossible get this exactly right in a single shot.

Br, Jarkko