adds hardened runtime and notarization options (Jigsaw-Code#1508)

ym9523 · Feb 13, 2024 · 06646f7 · 06646f7
1 parent ceca3d6
commit 06646f7
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 12 deletions.
diff --git a/src/server_manager/electron_app/electron_builder.json b/src/server_manager/electron_app/electron_builder.json
@@ -4,25 +4,37 @@
   "linux": {
     "icon": "icons/png",
     "category": "Network",
-    "target": [{
-      "target": "AppImage",
-      "arch": ["x64"]
-    }]
+    "target": [
+      {
+        "target": "AppImage",
+        "arch": ["x64"]
+      }
+    ]
   },
   "win": {
     "icon": "icons/win/icon.ico",
     "sign": "src/server_manager/electron_app/windows/electron_builder_signing_plugin.cjs",
     "signingHashAlgorithms": ["sha256"],
-    "target": [{
-      "target": "nsis",
-      "arch": "ia32"
-    }]
+    "target": [
+      {
+        "target": "nsis",
+        "arch": "ia32"
+      }
+    ]
   },
   "mac": {
+    "hardenedRuntime": true,
+    "entitlements": "src/server_manager/electron_app/release/macos.entitlements",
+    "entitlementsInherit": "src/server_manager/electron_app/release/macos.entitlements",
     "icon": "icons/mac/icon.icns",
-    "target": [{
-      "target": "dmg",
-      "arch": "universal"
-    }]
+    "target": [
+      {
+        "target": "dmg",
+        "arch": "universal"
+      }
+    ],
+    "notarize": {
+      "teamId": "QT8Z3Q9V3A"
+    }
   }
 }
diff --git a/src/server_manager/electron_app/release/macos.entitlements b/src/server_manager/electron_app/release/macos.entitlements
@@ -4,6 +4,8 @@
   <dict>
     <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
     <key>com.apple.security.network.client</key>
     <true/>
     <key>com.apple.security.network.server</key>