> Luke Small wrote: > > What if I want to prevent a process from forking while I want to create new > > EVFILT_PROC events? Say, to accept the pid of a sibling fork from a pipe > > and load it into a kqueue. Is there a reason why waitpid() isn't beholden > > to this, or is there a reason that EVFILT_PROC is? > > wait() is a less powerful syscall than kevent().
indeed, EVFILT_PROC lets you observe processes other than your own children. that way far outside "stdio", you are reasoning about processes in general, so of course you need pledge "proc".
