I'm not experienced at reverse engineering at all. I hope this basic question is suitable for this site. Basically I want to know where the value
DARWIN_USER_CACHE_DIR is read from. I'm trying to trace the system calls like this:
sudo bash dtruss /usr/bin/getconf DARWIN_USER_CACHE_DIR -h -f -a
So, it would follow any forked processes too. But, I cannot see any calls that would indicate where it originates from.