[launchd-dev] Privilege separation and crash resistance

[Quinn]

At 17:25 +0200 30/9/09, Thomas Clement wrote:
>What is the recommended solution to this situation?

I generally do this stuff with UNIX domain sockets because they are 
so much easier to understand than Mach ports.  In that case, each 
agent makes a connection to the daemon's listening UNIX domain 
socket.  If the client crashes, the daemon hears about it because the 
socket gets closed.  If the daemon crashes, the clients hear about it 
because the socket gets closed.  The client should then try to open 
the socket again, which will relaunch the daemon.

S+E
-- 
Quinn "The Eskimo!"                    <http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware