On 06/04/2017 13:56, David M. Lloyd wrote:
I know, I'm giving examples of how such a library could circumvent
this restriction. Another example is to start a child process and a
grandchild process, and then have the child process exit.
The examples in your first mail aren't a problem. Yes, the example in
this mail of an intermediate process terminating and being re-parented
to the init process will workaround any check that uses the process tree
but I don't think we should be overly distracted by wild-ass code doing
that. The purpose is simply to make it inconvenient for general purpose
libraries to get at these APIs for the purposes of doing brain surgery
in the current VM.
-Alan