Re:The Unix process API is unreliable and unsafe
by cryptonector on Thursday March 23, 2023 @01:01AM
(#35270715)
I would call it a spawn server, based on the "open server" or "doas" pattern, where you have a process that creates children to setuid() (etc.) which then set a private IPC service that open()s files and sends back the open FD to the caller.
That's a sensible strategy. Do you know if this design pattern has a name, of creating this "clean" process image base for forks via ipc?