launchd(8) | System Manager's Manual | launchd(8) |
launchd
— System
wide and per-user daemon/agent manager
launchd
manages processes, both for the
system as a whole and for individual users.
The primary and preferred interface to
launchd
is via the launchctl(1)
tool which (among other options) allows the user or administrator to load
and unload jobs. Where possible, it is preferable for jobs to launch on
demand based on criteria specified in their respective configuration
files.
launchd
also manages XPC services that are
bundled within applications and frameworks on the system.
During boot launchd
is invoked by the
kernel to run as the first process on the system and to further bootstrap
the rest of the system.
You cannot invoke launchd
directly.
On Darwin operating systems, the canonical way to launch a daemon
is through launchd
as opposed to traditional POSIX
and POSIX-like mechanisms or mechanisms provided in earlier versions of OS
X. These alternate methods should be considered deprecated and not suitable
for new projects.
In the launchd
lexicon, a daemon is, by
definition, a system-wide service of which there is one instance for all
clients. An agent is a service that runs on a per-user basis. Daemons should
not attempt to display UI or interact directly with a user's login session.
Any and all work that involves interacting with a user should be done
through agents.
XPC services which are marked with a ServiceType of System are functionally equivalent to daemons and run in the same environment, sharing the same Mach bootstrap namespace. XPC services which are marked with a ServiceType of User are equivalent to agents with the LimitLoadToSessionType key specifying the Background session and run in the same environment, sharing the same Mach bootstrap namespace. See launchd.plist(5) for more information about user sessions.
On Darwin platforms, a user environment includes a specific Mach
bootstrap subset, audit session and other characteristics not recognized by
POSIX. Therefore, making the appropriate setuid(2) and
setgid(2) system calls is not sufficient to completely
assume the identity for a given user. Running a service as a
launchd
agent or a per-user XPC service is the only
way to run a process with a complete identity of that user.
The Daemons and Services Programming Guide can be found at the following URL:
https://developer.apple.com/library/content/documentation/MacOSX/Conceptual/BPSystemStartup/Chapters/Introduction.html
25 November, 2013 | Darwin |