Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

We've all gotten the popup dialog box that says "[Some App] wants to make changes, type your password to allow this", but is there a way to get more information about what those changes are? It's always from an app I "trust", but I'd still like to know more about what it's doing that it needs my password for. Seems an aweful lot like Windows Vista's uber-useful security popups.

share|improve this question
add comment

1 Answer

You can use sudo opensnoop -n ProcessName to see what files have been opened by a process, but only after they've been accessed of course. You could also use fseventer to display modified files in a tree view.

The dialogs are shown by installers because they need root permissions to modify /Applications/ or other folders that aren't owned by the user. You can press ⌘I to see what files would be copied by an installer.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.