Re:Ask HN: Why does Zoom Desktop examine all processes and a...
by IgorPartola on Wednesday August 18, 2021 @12:38AM
(#28217831)
Reading the file would show up as syscalls.
[ Parent
| on HN ]
Re:Ask HN: Why does Zoom Desktop examine all processes and a...
by woodruffw on Wednesday August 18, 2021 @11:20AM
(#28222385)
Sure, but you could minimize it to just two: the `open` that we already see here, and an `mmap` that maps the entire thing in. The rest could be in userspace (at least in terms of effects). We only have an excerpt of the syscall trace, so it's possible that happens.
But again: extraordinarily unlikely.