Is there a way to trace what an app is installing during install process?

[SpeQ]

So if I install an app and later decide I want to uninstall, how can I find all files and folders that were created during the installation which might not use the name of the app? Is there something simple that can be done at the time of installation to make it easier to find these files?

 

[AlumaMac]

I used to use an app called fseventer to track app install files. It has since been discontinued but apparently FSMonitor functions similarly. Running the app during an app install will graphically show all the file/directory activity. You should also run it when the installed app is first launched since sometimes additional files are created at that point as well.

I preferred this method over using lsbom or pkgutil since I don't believe they disclose any files created after running the installer/package.

 

[SpeQ]

I used to use an app called fseventer to track app install files. It has since been discontinued but apparently FSMonitor functions similarly. Running the app during an app install will graphically show all the file/directory activity. You should also run it when the installed app is first launched since sometimes additional files are created at that point as well.

I preferred this method over using lsbom or pkgutil since I don't believe they disclose any files created after running the installer/package.

I assumed there were third party apps for this, like there are third party apps to uninstall. I was hoping for something simpler, like maybe a search by date added, but I don't know exactly how that would work.

 

[AlumaMac]

You could run the following terminal command to find all created files on a specific date:

sudo find / -type f -newerBt 2021-04-01

BUT, you'll have to give terminal 'Full Disk Access' in the Security Pref Pane and you'll have a ton of results to sift through. If you only care about stuff installed in your home folder you could change the search directory to ~/ and that should limit the results.

 

[AlumaMac]

I assumed there were third party apps for this, like there are third party apps to uninstall.

The biggest issue is that when a package installer runs and/or when an app first launches there can be postflight/setup scripts that install files and/or modify the system. These modifications usually aren't documented in the package BOM and the only way to track these script activities is to either take a filesystem snapshot before and after (then compare the two) or using realtime system event tracking (i.e. FSMonitor). So creating an app that would automatically track and monitor all of this for a specific installer/app could be rather tricky to implement.

 

[SpeQ]

You could run the following terminal command to find all created files on a specific date:

sudo find / -type f -newerBt 2021-04-01

BUT, you'll have to give terminal 'Full Disk Access' in the Security Pref Pane and you'll have a ton of results to sift through. If you only care about stuff installed in your home folder you could change the search directory to ~/ and that should limit the results.

I didn't see this reply earlier. I suppose I could install and launch just after midnight to narrow down the number of files.

Wouldn't Spotlight find the files with "system files - are included" and hidden files shown? I guess the files wouldn't be indexed that quickly?

 

[AlumaMac]

I didn't see this reply earlier. I suppose I could install and launch just after midnight to narrow down the number of files.

Wouldn't Spotlight find the files with "system files - are included" and hidden files shown? I guess the files wouldn't be indexed that quickly?

I'm not sure how accurate Spotlight would be. I run Spotlight mainly as a launcher so I have system files hidden so couldn't test the accuracy.

 

[satcomer]

I always would have the /Applucations/Utilities folder/Console.app is good thing to have I open to track installing software or immediately just after the Install! Console.app tracks all of that happens on your Mac!

 

[Toutou]

Is there something simple that can be done at the time of installation to make it easier to find these files?

You can hit Cmd + I with the installer open, it will show you what is going to be installed and where (if the devs are being fair and not trying to hide anything, i.e. it's possible to ostensibly install nothing, and then actually install the app in a post install script).

My solution for this is that I don't run PKGs. If the product can't make do with a normal .app bundle, well, they lost a customer. Yes, I'm that petty.

 

[AppleSmack]

Suspicious Package lets you inspect what an installer will do...

Suspicious Package — An app for inspecting macOS Installer packages

mothersruin.com

 

[DHKaplan]

As a variation answer to your question, AppCleaner https://freemacsoft.net/appcleaner/ will allow you to delete a program and dependencies, I have no idea how complete it is, but it's sure better than just deleting an app. An option exists to monitor the recycle bin, and ask about the dependencies when you move an app to the bin.