Skip to content

Conversation

@philippitts
Copy link
Member

In order to add entitlements to MacOS applications and get it notarized by Apple, the program has to meet hardened runtime requirements. Using entitlements is required to allow embedded plugins to access different permissions on MacOS. The hardened runtime requirements disallow using relative paths for dynamic libraries to prevent dynamic library hijacking. This PR updates the library loading implementation to use absolute paths.

@philippitts philippitts self-assigned this Jan 13, 2023
@Andrey1994
Copy link
Contributor

What does this method return for all OSes?

@Andrey1994
Copy link
Contributor

I think unpack_from_jar method should return full path and it should be used by jna loadlibrary

And seems like I need to do the same in brainflow

@philippitts philippitts force-pushed the use-absolute-library-paths branch from 1c28672 to 10f81dc Compare February 3, 2023 22:47
@philippitts philippitts merged commit dd608e9 into master Mar 13, 2023
@philippitts philippitts deleted the use-absolute-library-paths branch March 13, 2023 23:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants