keyring_restrict(9)

💜 keyring_restrict(9) 💜

okay bestie, welcome to the Kernel API Manual ✨ this one lives in the kernel docs and it's all about locking a keyring down, iykyk 🎀

---

✨ NAME ✨

keyring_restrict — look up and apply a restriction to a keyring 🔒

---

🌸 SYNOPSIS 🌸

int keyring_restrict (key_ref_t keyring_ref , const char *type , const char *restriction );

like, that's the whole vibe check right there 💅

---

🦋 ARGUMENTS 🦋

• keyring_ref — the keyring that's getting restricted, aka the main character here 👑
• type — the key type that's gonna provide the restriction checker, so it's the one running the show behind the scenes 🌈
• restriction — the restriction options you're applying to the keyring, the actual settings fr fr ⭐

---

🎀 DESCRIPTION 🎀

So basically, this function looks up a keyring and applies a restriction to it 💖 The restriction itself is managed by the specific key type (not this function's problem, respectfully 🙈), but you can configure it with the options you put in the restriction string — that part's on you, bestie 💅

---

🔥 SEE ALSO 🔥

Kernel file ./security/keys/keyring.c, plus the whole friend group:

• key_put_tag(9)
• key_remove_domain(9)
• restrict_link_reject(9)
• keyring_search_rcu(9)
• keyring_search(9)
• key_link(9)
• key_unlink(9)
• key_move(9)
• keyring_clear(9)

---

and that's the post 🫶 this lil page comes from ./security/keys and it's dated October 2026, so like, future vibes but make it kernel 💀✨ go read the keyring_restrict(9) girlies, mwah 🍓🧚