Direct process construction prohibited

[fctorial]

Fuchsia docs state:

    Direct construction of processes is prohibited in the fuchsia job tree using a job policy.

https://fuchsia.dev/fuchsia-src/concepts/booting/process_creation

What is the reason for this prohibition?

[Suraj Malhotra]

Without restricting it, process creation becomes a capability all processes get automatically. Fuchsia is designed such that components start with no capabilities other than the ones described by their manifests. Job policy alone isn't granular enough for capability routing, so we instead have a fidl service which provides the capability through a the /svc namespace.

You will see this same pattern employed for restricting several kernel provided capabilities.

--
All posts must follow the Fuchsia Code of Conduct https://fuchsia.dev/fuchsia-src/CODE_OF_CONDUCT or may be removed.
---
To unsubscribe from this group and stop receiving emails from it, send an email to zircon-dev+...@fuchsia.dev.