Re: [RFC PATCH 0/4] KEYS: sanitize the garbage collector behavior

From: Jarkko Sakkinen

Date: Mon Nov 02 2026 - 19:42:43 EST


On Tue, Nov 03, 2026 at 02:03:33AM +0200, Jarkko Sakkinen wrote:
> On Mon, Nov 02, 2026 at 02:15:11PM +0200, Jarkko Sakkinen wrote:
> > 1. Remove key_type_dead and replace it with the regular module semantics.
> > 2. Replace variable size workqueue items with fixed-size 64 key chunks.
> >
> > The first change has user space visible effect: rmmod semantics will change
> > from always succeeding into returning -EBUSY when keys or restrictions have
> > the LKM pinned.
> >
> > Jarkko Sakkinen (4):
> > KEYS: trusted: Disable sysfs bind attributes for TEE driver
> > KEYS: Pin the backing module for struct key_type
> > KEYS: Remove key_type_dead
> > KEYS: key_garbage_collector(): process in chunks
>
> This turned into patch set consisting of 10 kernel patches. It will
> take a bit to get them out as I'm still polishing them.

At least for me dns_resolver feels like the nastiest corner case (or
perhaps I'm over-complicating it somehow, don't know yet). I have
one patch but I still have ideas left so still experimenting on this
topic a bit, and trying out different approaches.

Br, Jarkko