I am trying to restrict an app’s (RetroArch) file permissions by removing home directory permission and only granting access to game directory, and it works without home but when I open a game I get a “File open/read error” even though the game still works fine. My question is is there anyway to see which files an app tried to access that was blocked by the sandbox or which directories an app is reading/writing to so I can let it access that file?
strace is the best bet.