From c34864ccab116571409b772cd9a109b87331348d Mon Sep 17 00:00:00 2001 From: Eike Ziller Date: Tue, 18 Feb 2020 15:36:11 +0100 Subject: macOS: Disable library validation when signing So we can load 3rdparty plugins even when the app is signed and notarized. Also give Qt Creator "debugging" capabilities, allowing it to attach to processes. Change-Id: Ia6bb8ab279920b75a96777eafebbb4e7454fda46 Reviewed-by: Eike Ziller --- dist/installer/mac/entitlements.plist | 10 ++++++++++ scripts/common.py | 4 +++- 2 files changed, 13 insertions(+), 1 deletion(-) create mode 100644 dist/installer/mac/entitlements.plist diff --git a/dist/installer/mac/entitlements.plist b/dist/installer/mac/entitlements.plist new file mode 100644 index 0000000000..0aae7ab39d --- /dev/null +++ b/dist/installer/mac/entitlements.plist @@ -0,0 +1,10 @@ + + + + + com.apple.security.cs.debugger + + com.apple.security.cs.disable-library-validation + + + diff --git a/scripts/common.py b/scripts/common.py index db97ea3561..e1746f4700 100644 --- a/scripts/common.py +++ b/scripts/common.py @@ -211,5 +211,7 @@ def codesign(app_path): lambda ff: ff.endswith('.dylib')) codesign = codesign_call() if is_mac_platform() and codesign: + entitlements_path = os.path.join(os.path.dirname(os.path.realpath(__file__)), '..', 'dist', + 'installer', 'mac', 'entitlements.plist') # sign the whole bundle - subprocess.check_call(codesign + ['--deep', app_path]) + subprocess.check_call(codesign + ['--deep', app_path, '--entitlements', entitlements_path]) -- cgit v1.2.3