Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working on building an application that needs to use the group keyring to share some sensitive data between processes with different owners. Whenever I try to access the group keyring (e.g."@g") using either the keyctl command or the underlying API, I get an error.

I'm guessing I have to set some kind of state to let it know which of my groups to get the keyring for, but documentation on this kernel feature is sparse. Anybody know how to make it work for groups?

share|improve this question
up vote 1 down vote accepted

Is the group keyring yet implemented at all? It wasn't couple of years ago, and even the kernel 3.2.9 source file security/keys/keyctl.c shows this:

            ret = -EINVAL;
            goto error;

and keyctl man page (in Fedora 16) states:

   (*) Group specific keyring: @g or -6

   This is a place holder for a group specific keyring, but is not actually implemented yet in the kernel.
share|improve this answer
That would explain things. I've been over that man page and the kernel keys documentation a lot over the last week, but that particular item slipped past me. Thanks for pointing it out. – Travis Jensen Mar 8 '12 at 17:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.