Code review comment for lp:~ted/ubuntu-app-launch/process-group-kill

On Fri, 2014-04-11 at 23:05 +0000, Tyler Hicks wrote:

> While this should work for the purposes of bug 1303676, lets be sure we don't depend, from a security standpoint, on this change to kill all processes spawned by an application. An application could create another process group and move all of its processes to that group and this change would not kill those processes.
>
> I don't think the intent of this change is to fully clean up, with 100% assurance, after an application. As long as that's the case, it looks good to me! :)

Yes, that isn't the intent. The question would be whether we pursue a
cgroups based solution for Upstart or wait to implement it on systemd.