# Pastebin kVSZemIN This just creates a pair of anonymous connected Unix sockets, and then forks the new privileged process. The assumption is that the original process was started with at least the required privileges (perhaps from something like systemd), and this “start” function is invoked early in the process startup - prior to the regular unprivileged process dropping all privileges. This is designed to mirror the “normal” way that Unix daemons work, and does not use sudo at any point.