MacOS X File System Watcher

Question

I am developing a utility application that logs file system actions of other applications. Therefore, I am looking for a way to receive notifications of changes to the file system, including file paths, as well as the corresponding PIDs.

According to my state of knowledge, the only way to do this is to listen to "/ dev / fsevents" using root privileges. Is there any other way to track these changes on the file system without starting the process with root privileges?

Thanks in advance!

Regards,
Tobias

Answer 1

No. You need to use /dev/fseventseither dtraceor something else, all of which require root privileges.

, FSEvents api , .

. " root?", : " , root ?"

, , root: , root, .