Re: [RFC PATCH v2 06/11] s390/cert_store: Track subsystem keys instead of re-registering key_type

[Jarkko Sakkinen]

On Tue, Nov 03, 2026 at 05:02:11AM +0200, Jarkko Sakkinen wrote:
> cert_store refreshes its keyring by unregistering and re-registering
> key_type_cert_store_key so key_type_dead garbage collection sweeps old
> keys, while leaving userspace-linked keys behind.
> 
> The removal of key_type_dead will eliminate that sweep.
> 
> Register key_type_cert_store_key once during init before creating sysfs
> attributes, and track subsystem-created keys explicitly so refresh
> unlinks and invalidates previous entries directly.
> 
> Signed-off-by: Jarkko Sakkinen <jarkko@xxxxxxxxxx>

I would not take this yet too seriously although I've tried to do it
carefully. I just needed to find some solutions for intersection
points, and thus this is more like "WiP" (and patch set is RFC).

I need rework the gist of the whole patch set a bit more than I
first thought. I.e. things like DNS resolver set some walls of
the feasibility of the chosen approach.

Br, Jarkko