move POSIX spawn, exec and child tracking into posixsrv, keep process transactions alive across reconnects and preserve stable PIDs across image replacement, flesh out spawn with ordered file actions, process-group selection and signal inheritance, implement execve with bootstrap validation and rollback before retiring the old process, add vfork children that share the native process while keeping separate POSIX descriptor and signal state, replace local spawn bookkeeping with child reaping, nonblocking and process-group waits and orphan cleanup, add signal dispositions, per-thread masks, pending delivery, process/group signalling and alarms, translate native exceptions into POSIX signals and inherit masks when creating threads, make pipe waits interruptible and raise SIGPIPE for broken pipes, pass arguments and environment into main and add getenv/environ, add direct user APC notifications that can run without an alertable wait, add current-thread capabilities and resume-and-wait, let accepted IPC endpoints open restricted peer process capabilities and preserve caller security during spawn and exec, make process preparation reusable and improve DLL lookup across current, executable and fallback directories, move keyboard repeat into RSSRV so PS/2 and USB share one repeat policy, fix video presentation, report launch failure stages and status codes, mooaaar tests.

code/public/ntlite/port.h

@@ -37,8 +37,9 @@
 #define SYS_PORT_RIGHT_SEND       0x00000400u
 #define SYS_PORT_RIGHT_RECEIVE    0x00000800u
 #define SYS_PORT_RIGHT_CALL       0x00001000u
-#define SYS_PORT_RIGHT_REPLY      0x00002000u
-#define SYS_PORT_RIGHT_DISCONNECT 0x00004000u
+#define SYS_PORT_RIGHT_REPLY             0x00002000u
+#define SYS_PORT_RIGHT_DISCONNECT        0x00004000u
+#define SYS_PORT_RIGHT_OPEN_PEER_PROCESS 0x00008000u
 
 // Describes one capability that accompanies a Port message.
 typedef struct SYS_PORT_HANDLE_TRANSFER {
@@ -74,6 +75,8 @@ typedef struct SYS_CREATE_PORT_REQUEST {
     uint32_t Size;
     uint32_t Flags;
     uint32_t Backlog;
+    SYS_RIGHTS PeerProcessRights;
+    uint32_t Reserved;
     SYS_HANDLE* HandleOut;
 } SYS_CREATE_PORT_REQUEST;