syscall.sh / x64 / keyctl

keyctl

manipulate the kernel's key management facility

sys_keyctl(int cmd, unsigned long arg2, unsigned long arg3, unsigned long arg4, unsigned long arg5)
number250 (0xfa)
abicommon
entry pointsys_keyctl
sinceLinux 3.3
man pagekeyctl(2)
sourceelixir.bootlin.com

Registers

registervalue
rax250, the syscall number
rdiint cmd
rsiunsigned long arg2
rdxunsigned long arg3
r10unsigned long arg4
r8unsigned long arg5
raxthe return value

Then run syscall to enter the kernel.

Same syscall on other architectures

Get this as JSON: https://api.syscall.sh/v2/syscalls/x64/keyctl