From 79d1d1b4405b9f76de10b9c2c5ecdca686b1f7b9 Mon Sep 17 00:00:00 2001 From: Tor Lillqvist Date: Tue, 30 Jul 2013 11:36:18 +0300 Subject: Use sandboxing when requested also for the app bundle in the dmg Change-Id: I612be680e7aea2b098894aa4e11b10b471d34144 --- solenv/bin/modules/installer/simplepackage.pm | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/solenv/bin/modules/installer/simplepackage.pm b/solenv/bin/modules/installer/simplepackage.pm index bf769f4d36d0..3a745ecc0e42 100644 --- a/solenv/bin/modules/installer/simplepackage.pm +++ b/solenv/bin/modules/installer/simplepackage.pm @@ -424,7 +424,10 @@ sub create_package # participate in the signing and their validity can be # guaranteed. - $systemcall = "codesign --sign $ENV{'MACOSX_CODESIGNING_IDENTITY'} --force -v -v -v $localtempdir/$folder/$volume_name_classic_app.app"; + $entitlements = ''; + $entitlements = "--entitlements $ENV{'BUILDDIR'}/lo.xcent" if defined($ENV{'ENABLE_MACOSX_SANDBOX'}); + + $systemcall = "codesign --sign $ENV{'MACOSX_CODESIGNING_IDENTITY'} --force $entitlements -v -v -v $localtempdir/$folder/$volume_name_classic_app.app"; print "... $systemcall ...\n"; my $returnvalue = system($systemcall); $infoline = "Systemcall: $systemcall\n"; -- cgit