Disallowing the dynamic loading of agents by default (revised)

[Alan Bateman]

On 06/04/2017 13:56, David M. Lloyd wrote:

>
> I know, I'm giving examples of how such a library could circumvent 
> this restriction.  Another example is to start a child process and a 
> grandchild process, and then have the child process exit.
The examples in your first mail aren't a problem. Yes, the example in 
this mail of an intermediate process terminating and being re-parented 
to the init process will workaround any check that uses the process tree 
but I don't think we should be overly distracted by wild-ass code doing 
that. The purpose is simply to make it inconvenient for general purpose 
libraries to get at these APIs for the purposes of doing brain surgery 
in the current VM.

-Alan