In theory the parsing could run at a low privilege level subprocess. Root/admin is only needed to get the bytes.
That’s generally too slow though; these things run in kernel space as they scan every I/O stream. Context switching and memory copies would kill performance.
alt Hacker News
That’s generally too slow though; these things run in kernel space as they scan every I/O stream. Context switching and memory copies would kill performance.