I'm specifically thinking about a transparent proxy provider, since that's what we're using, so what happens if:
- Process
/Applications/Foo.app/Contents/MacOS/Fooopens a connection to, say, google port 443 - After getting the connection set up, it then fork&execs
/bin/sh(or whatever 😄).
Does a new flow get created? Or does it continue to use the existing one?