---
name: "keyctl_revoke"
section: "3"
platform: "linux"
package: "keyutils"
version: "1.6.3-4"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/keyctl_revoke"
---

# keyctl\_revoke(3)

revoke a key

## NAME

keyctl\_revoke - revoke a key

## SYNOPSIS

```
#include <keyutils.h>

long keyctl_revoke(key_serial_t key);
```

## DESCRIPTION

**keyctl\_revoke**() marks a key as being revoked.

After this operation has been performed on a key, attempts to access it will meet with error **EKEYREVOKED**.

The caller must have **write** permission on a key to be able to revoke it.

## RETURN VALUE

On success **keyctl\_revoke**() returns **0**. On error, the value **-1** will be returned and *errno* will have been set to an appropriate error.

## ERRORS

- **ENOKEY**

  The specified key does not exist.

- **EKEYREVOKED**

  The key has already been revoked.

- **EACCES**

  The named key exists, but is not **writable** by the calling process.

## LINKING

This is a library function that can be found in *libkeyutils*. When linking, **-lkeyutils** should be specified to the linker.

## SEE ALSO

[**keyctl**(1)](/keyctl/1.md), [**add\_key**(2)](/add_key/2.md), [**keyctl**(2)](/keyctl/2.md), [**request\_key**(2)](/request_key/2.md), [**keyctl**(3)](/keyctl/3.md), [**keyrings**(7)](/keyrings/7.md), [**keyutils**(7)](/keyutils/7.md)