Tell me more ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.
up vote 2 down vote favorite

I would like to know which process has created files on os X 10.6. I'm trying DTrace, which probably will give the right answer, but I have not eyes to see the method. I'm doing this because I think some oddities are happening with the Flash plugin, and triggering spotlight.

share|improve this question
auditctl might be the way... looking into it thx – chiggsy Jul 21 '11 at 9:37

1 Answer

up vote 1 down vote

Would lsof help? If the file is still open, you can see who has it open. Also very useful when you get "device or resource busy" errors.

share|improve this answer
No, lsof is not the way. See, I might come across a strange file, and wonder how it got there. DTrace is fine for the actual opening when it's open. But when I sit down and say "hmm where did this 'always_watchin_you.sol' file come from?", all i get is that it's my UID. – chiggsy Jul 17 '11 at 10:56

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.