Is there an analogue to cgroups in Darwin for preventing processes from escaping from the control / monitoring of its parent process by means of
fork()? If yes, what is it?
For some background, consider a process, P, a direct descendant, Q, and the descendants of Q, R: cgroups allows P to control and monitor Q and R. If P launches Q, but Q spawns a process (r in R), without something akin to cgroups, P is unable to monitor r.
A real world example of this would be systemd (P) spawning openssh's sshd (Q) as a daemon, which then spawns other instances of sshd (R) to handle each opened session. Without cgroups, systemd would not be able to interact with the per-session sshd's.
(In the NT environment, cgroups are analogous to Job objects.)