From 6b06fb702872cc2af219ba8c2050d239fab9ee21 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michael=20Br=C3=BCning?= <michael.bruning@qt.io>
Date: Thu, 9 Jan 2020 18:00:49 +0100
Subject: [macOS] Install entitlements file for QtWebEngineProcess.app

This is needed so macdeployqt can find the entitlements file and enable
us to sign the QtWebEngineProcess binary for the entitlements it needs
with the hardened runtime.

Change-Id: I0c1811af84aa4b8ae3f30129909f092dff0f816f
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
---
 src/process/Entitlements_mac.plist          | 12 ------------
 src/process/QtWebEngineProcess.entitlements | 12 ++++++++++++
 src/process/process.pro                     |  5 +++++
 3 files changed, 17 insertions(+), 12 deletions(-)
 delete mode 100644 src/process/Entitlements_mac.plist
 create mode 100644 src/process/QtWebEngineProcess.entitlements

(limited to 'src/process')

diff --git a/src/process/Entitlements_mac.plist b/src/process/Entitlements_mac.plist
deleted file mode 100644
index f2fbabddb..000000000
--- a/src/process/Entitlements_mac.plist
+++ /dev/null
@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-	<true/>
-	<key>com.apple.security.cs.disable-library-validation</key>
-	<true/>
-	<key>com.apple.security.cs.allow-jit</key>
-	<true/>
-</dict>
-</plist>
diff --git a/src/process/QtWebEngineProcess.entitlements b/src/process/QtWebEngineProcess.entitlements
new file mode 100644
index 000000000..f2fbabddb
--- /dev/null
+++ b/src/process/QtWebEngineProcess.entitlements
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+	<true/>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+	<key>com.apple.security.cs.allow-jit</key>
+	<true/>
+</dict>
+</plist>
diff --git a/src/process/process.pro b/src/process/process.pro
index e861af182..72aad52a5 100644
--- a/src/process/process.pro
+++ b/src/process/process.pro
@@ -46,6 +46,11 @@ qtConfig(build_all): CONFIG += build_all
 qtConfig(framework) {
     # Deploy the QtWebEngineProcess app bundle into the QtWebEngineCore framework.
     DESTDIR = $$MODULE_BASE_OUTDIR/lib/QtWebEngineCore.framework/Versions/5/Helpers
+
+    # Deploy the entitlements file so macdeployqt can use it.
+    entitlements.files = QtWebEngineProcess.entitlements
+    entitlements.path = Contents/Resources/
+    QMAKE_BUNDLE_DATA += entitlements
 } else {
     CONFIG -= app_bundle
     win32: DESTDIR = $$MODULE_BASE_OUTDIR/bin
-- 
cgit v1.2.3