News for hackers. Stuff that matters.
Re:The Unix process API is unreliable and unsafe by stevenhuang on Thursday March 23, 2023 @12:14AM (#35270471)
> Ironically the best to way manage all of this nonsense is to create a child process first thing in main

That's a sensible strategy. Do you know if this design pattern has a name, of creating this "clean" process image base for forks via ipc?

Re:The Unix process API is unreliable and unsafe by cryptonector on Thursday March 23, 2023 @01:01AM (#35270715)
I would call it a spawn server, based on the "open server" or "doas" pattern, where you have a process that creates children to setuid() (etc.) which then set a private IPC service that open()s files and sends back the open FD to the caller.