These syscalls provide all the necessary functionality to interact with the FS. Here are some examples:
- open/openat/creat: Open and possibly create a file
- read/readv/preadv: Get data from the file descriptor
- write/writev/pwritev: Put data in the file descriptor
- readdir/getdents: Read the content of the directory, for example, to search for files of interest
- access: Check file permissions, for example, for valuable data or own modules
- chmod: Change file permissions
- chdir/chroot: Change the current or root directory
- rename: Change the name of a file
- unlink/unlinkat: Can be used to delete a file, for example, to corrupt the system or hide traces of malware
- rmdir: Remove the directory