Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've all gotten the popup dialog box that says "[Some App] wants to make changes, type your password to allow this", but is there a way to get more information about what those changes are? It's always from an app I "trust", but I'd still like to know more about what it's doing that it needs my password for. Seems an aweful lot like Windows Vista's uber-useful security popups.

share|improve this question

You can use sudo opensnoop -n ProcessName to see what files have been opened by a process, but only after they've been accessed of course. You could also use fseventer to display modified files in a tree view.

The dialogs are shown by installers because they need root permissions to modify /Applications/ or other folders that aren't owned by the user. You can press ⌘I to see what files would be copied by an installer.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.