Guardian Procedure Calls Reference Manual (G06.25+)

Guardian Procedure Calls (P)
Guardian Procedure Calls Reference Manual—522629-013
12-205
PROCESS_SUSPEND_ Procedure
processhandle input
INT .EXT:ref:10
specifies the process handle of the process to be suspended.
specifier input
INT:value
for a named process pair, indicates whether both members should be suspended.
Valid values are:
0 Suspend the specified process only.
1 Suspend both members of current instance of named process pair if the
specified process is part of a named process pair; otherwise suspend the
specified process.
The default is 0.
Considerations
•
Reactivating a process
You can reactivate a suspended process or process pair by calling
PROCESS_ACTIVATE_. You can also reactivate it by calling
ACTIVATEPROCESS, but you must have a process ID to identify the process. A
process handle can be converted to a process ID by a call to
PROCESSHANDLE_TO_CRTPID_ , but the conversion will fail if the PIN of the
process is greater than 255.
•
Security
When PROCESS_SUSPEND_ is called on a Guardian process, the caller must be
the super ID, the group manager of the process access ID, or a process with the
same process access ID as the process or process pair being suspended. For
information about the process access ID, refer to the description under
“Considerations” for the PROCESS_GETINFO_ procedure and the
Guardian
User’s Guide
.
The caller must be local to the same system as the specified process. A process
is considered to be local to the system on which its creator is local. A process is
considered to be remote, even if it is running on the local system, if its creator is
remote. (In the same manner, a process running on the local system whose
creator is also running on the local system might still be considered remote
because it’s creator’s creator is remote.)
A remote process running on the local system can become a local process by
successfully logging on to the local system using a call to the
USER_AUTHENTICATE_ (or VERIFYUSER) procedure. After a process logs on
to the local system, any processes that it creates are considered local.