Hacker News Reader

Comment by sharikous | Hacker News Reader

No more. At least with apple Silicon dtrace is completely unusable.

It still works if you turn off SIP. This is the same on Apple Silicon and Intel. However, for these purpose of tracking file accesses, I recommend using `eslogger` instead, as it doesn’t require disabling SIP and is faster, among other advantages.

You can also use Activity Monitor and view process details to see all open file handles etc

Sure but I don't think that most programs keep their config files open the whole time they're running.

On M2 it is completely broken. Any usage of dtrace will hang the whole desktop. (Not sure if just the desktop or is it the whole kernel crashing)

Feel free to reference my feedback entry FB12061147 if you're reporting the same.

Use fs_usage. https://ss64.com/osx/fs_usage.html

It’ll show all file events. No need to disable SIP. SIP is doing a lot of good work for users and unless you’re doing kernel work or low level coding I’d keep it enabled. Obv. There are other cases but for the general public keep it on.

It’s personal preference. If the security people had their way we’d all be developing on iPads. If SIP interferes with your work: turn it off. Linux doesn’t have SIP and it’s just fine to develop on Linux as well.

100% agree. We would put everyone on chromebooks if we had our way. I don’t think it’s good for productivity and generating new ideas for a company so I never advocate for it.

There was a man who never existed named Thomas Covenant, created by Stephen R Donaldson. Decades ago this character said something that has stayed and will stay with me my entire life:

"The best way to hurt somebody who's lost everything is to give him back something that is broken."

For us, this thing is MacOS. I miss dtrace every damn day.

DTrace allowed you to ask the damn os what it was doing, since the man pages are random and do not match the command line help, new daemons constantly appear with docs like this:

NAME rapportd – Rapport Daemon.

SYNOPSIS Daemon that enables Phone Call Handoff and other communication features between Apple devices.

     Use '/usr/libexec/rapportd -V' to get the version.

Dogshit.

OS X was the last chance the industry had to make a "commercial unix workstation", and Apple came >< close. Stallman was right.

There's also fs_usage that doesn't require disabling SIP:

https://mohit.io/blog/fs_usage-trace-file-system-calls-on-ma...

Reply on news.ycombinator.com