That's one option, yes. The one I've favored while reading these arguments has been the "suspended process" model. The primitives are CREATE(), which takes an

That's one option, yes. The one I've favored while reading these arguments has been the "suspended process" model. The primitives are CREATE(), which takes an executable as a parameter and returns the PID of a paused process, and START(), which allows the process to actually run. Unix already has the concept of a paused executable, after all. This model also requires all the process-mutation syscalls, like setrlimit(), to accept a PID as a parameter, but prlimit() wound up being created anyway, because the ability to mutate an already-running process is useful.