On Fri, Oct 16, 2009 at 03:25:35PM -0500, Nicolas Williams wrote:
> I agree.  I don't know what can be done about it :(

Actually, here's a variant of your idea...  You could have a tmpfs-like
filesystem that applies this access control to attempts to create/write
to files: the file must be named after the process' SMF FMRI, and the
process must be a member of the running service's process contract.

That would mean that all you'd have to do is set the path for a daemon's
PID file accordingly.

Nico
-- 

Reply via email to