I'm sorry if this was asked but I was unable to find a satisfcatory answer. I know how access control works with respect to objects (files, devices, etc.), but it's not clear to me how this translate to processes.

Let's say that user U1 starts a process P1, then P1 will be marked with UID(U1) and GID(U1). Now, if P2 is a process started by another user U2, what can P2 do to P1? Can it kill it? Can it see its address space (like a debugger etc.)? How is this decided with respect to UID(U1), GID(U1), UID(U2) and GID(U2)?



You must log in to answer this question.

Browse other questions tagged .