Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I would like to know which process has created files on os X 10.6. I'm trying DTrace, which probably will give the right answer, but I have not eyes to see the method. I'm doing this because I think some oddities are happening with the Flash plugin, and triggering spotlight.

share|improve this question
    
    
auditctl might be the way... looking into it thx –  chiggsy Jul 21 '11 at 9:37
add comment

1 Answer

Would lsof help? If the file is still open, you can see who has it open. Also very useful when you get "device or resource busy" errors.

share|improve this answer
    
No, lsof is not the way. See, I might come across a strange file, and wonder how it got there. DTrace is fine for the actual opening when it's open. But when I sit down and say "hmm where did this 'always_watchin_you.sol' file come from?", all i get is that it's my UID. –  chiggsy Jul 17 '11 at 10:56
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.