enable hardened runtime for macOS builds

umiryu417 · Jan 16, 2020 · 6a33d41 · 6a33d41
1 parent 9b22411
commit 6a33d41
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/buildResources/entitlements.inherit.plist b/buildResources/entitlements.inherit.plist
@@ -4,6 +4,8 @@
 <dict>
 <key>com.apple.security.app-sandbox</key>
 <true/>
+<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+<true/>
 <key>com.apple.security.inherit</key>
 <true/>
 </dict>

diff --git a/buildResources/entitlements.plist b/buildResources/entitlements.plist
@@ -4,6 +4,8 @@
 <dict>
 <key>com.apple.security.app-sandbox</key>
 <true/>
+<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+<true/>
 <key>com.apple.security.device.audio-input</key>
 <true/>
 <key>com.apple.security.device.camera</key>

diff --git a/electron-builder.yaml b/electron-builder.yaml
@@ -5,6 +5,7 @@ appId: edu.mit.scratch.scratch-desktop
 productName: "Scratch Desktop"
 mac:
   category: public.app-category.education
+  hardenedRuntime: true
   icon: buildResources/ScratchDesktop.icns
   provisioningProfile: embedded.provisionprofile
   target:
-Original file line number
+Diff line change
@@ Expand Up / @@ -4,6 +4,8 @@ @@
     <dict>
     <key>com.apple.security.app-sandbox</key>
     <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
     <key>com.apple.security.inherit</key>
     <true/>
     </dict>
@@ Expand Down @@