Skip to main content
aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorLakshmi Shanmugam2019-09-03 02:52:27 -0400
committerLakshmi Shanmugam2019-09-03 05:24:55 -0400
commit7d53981078d09b2a60daf841de95b8f5170698b4 (patch)
tree62020fdc403dfffc34998822bc1c85fc944a71d7
parenta356c4606b8f8963518dd0cb3c2459b00be4fd41 (diff)
downloadeclipse.platform.releng.aggregator-7d53981078d09b2a60daf841de95b8f5170698b4.tar.gz
eclipse.platform.releng.aggregator-7d53981078d09b2a60daf841de95b8f5170698b4.tar.xz
eclipse.platform.releng.aggregator-7d53981078d09b2a60daf841de95b8f5170698b4.zip
Bug 550674 - Specify hardened runtime for Mac app signing
Added the entitlement files for the 3 products. Added the entitlement to the pom files. Change-Id: I277eb415961f3a62f2f2777f6e8685f39384e351
-rw-r--r--eclipse.platform.releng.tychoeclipsebuilder/entitlement/equinox.entitlement18
-rw-r--r--eclipse.platform.releng.tychoeclipsebuilder/entitlement/platform.entitlement18
-rw-r--r--eclipse.platform.releng.tychoeclipsebuilder/entitlement/sdk.entitlement18
-rw-r--r--eclipse.platform.releng.tychoeclipsebuilder/equinox.starterkit.product/pom.xml3
-rw-r--r--eclipse.platform.releng.tychoeclipsebuilder/platform/pom.xml1
-rw-r--r--eclipse.platform.releng.tychoeclipsebuilder/sdk/pom.xml1
6 files changed, 58 insertions, 1 deletions
diff --git a/eclipse.platform.releng.tychoeclipsebuilder/entitlement/equinox.entitlement b/eclipse.platform.releng.tychoeclipsebuilder/entitlement/equinox.entitlement
new file mode 100644
index 00000000..6fdb9d33
--- /dev/null
+++ b/eclipse.platform.releng.tychoeclipsebuilder/entitlement/equinox.entitlement
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+ <key>com.apple.security.cs.allow-jit</key>
+ <true/>
+ <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+ <true/>
+ <key>com.apple.security.cs.disable-executable-page-protection</key>
+ <true/>
+ <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+ <true/>
+ <key>com.apple.security.cs.disable-library-validation</key>
+ <true/>
+ <key>com.apple.security.cs.debugger</key>
+ <true/>
+</dict>
+</plist> \ No newline at end of file
diff --git a/eclipse.platform.releng.tychoeclipsebuilder/entitlement/platform.entitlement b/eclipse.platform.releng.tychoeclipsebuilder/entitlement/platform.entitlement
new file mode 100644
index 00000000..6fdb9d33
--- /dev/null
+++ b/eclipse.platform.releng.tychoeclipsebuilder/entitlement/platform.entitlement
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+ <key>com.apple.security.cs.allow-jit</key>
+ <true/>
+ <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+ <true/>
+ <key>com.apple.security.cs.disable-executable-page-protection</key>
+ <true/>
+ <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+ <true/>
+ <key>com.apple.security.cs.disable-library-validation</key>
+ <true/>
+ <key>com.apple.security.cs.debugger</key>
+ <true/>
+</dict>
+</plist> \ No newline at end of file
diff --git a/eclipse.platform.releng.tychoeclipsebuilder/entitlement/sdk.entitlement b/eclipse.platform.releng.tychoeclipsebuilder/entitlement/sdk.entitlement
new file mode 100644
index 00000000..6fdb9d33
--- /dev/null
+++ b/eclipse.platform.releng.tychoeclipsebuilder/entitlement/sdk.entitlement
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+ <key>com.apple.security.cs.allow-jit</key>
+ <true/>
+ <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+ <true/>
+ <key>com.apple.security.cs.disable-executable-page-protection</key>
+ <true/>
+ <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+ <true/>
+ <key>com.apple.security.cs.disable-library-validation</key>
+ <true/>
+ <key>com.apple.security.cs.debugger</key>
+ <true/>
+</dict>
+</plist> \ No newline at end of file
diff --git a/eclipse.platform.releng.tychoeclipsebuilder/equinox.starterkit.product/pom.xml b/eclipse.platform.releng.tychoeclipsebuilder/equinox.starterkit.product/pom.xml
index 5bfc33ff..1b08a178 100644
--- a/eclipse.platform.releng.tychoeclipsebuilder/equinox.starterkit.product/pom.xml
+++ b/eclipse.platform.releng.tychoeclipsebuilder/equinox.starterkit.product/pom.xml
@@ -138,7 +138,8 @@
<fileName>Rt.app</fileName>
</fileNames>
<timeoutMillis>300000</timeoutMillis> <!-- 5 min -->
- <continueOnFail>${macSigner.forceContinue}</continueOnFail>
+ <continueOnFail>${macSigner.forceContinue}</continueOnFail>
+ <entitlements>${project.basedir}/../entitlement/equinox.entitlement</entitlements>
</configuration>
</execution>
</executions>
diff --git a/eclipse.platform.releng.tychoeclipsebuilder/platform/pom.xml b/eclipse.platform.releng.tychoeclipsebuilder/platform/pom.xml
index f3d4aec4..5ca0a580 100644
--- a/eclipse.platform.releng.tychoeclipsebuilder/platform/pom.xml
+++ b/eclipse.platform.releng.tychoeclipsebuilder/platform/pom.xml
@@ -119,6 +119,7 @@
<configuration>
<timeoutMillis>300000</timeoutMillis> <!-- 5 min -->
<continueOnFail>${macSigner.forceContinue}</continueOnFail>
+ <entitlements>${project.basedir}/../entitlement/platform.entitlement</entitlements>
</configuration>
</execution>
</executions>
diff --git a/eclipse.platform.releng.tychoeclipsebuilder/sdk/pom.xml b/eclipse.platform.releng.tychoeclipsebuilder/sdk/pom.xml
index 6d6fbd84..7551fcf1 100644
--- a/eclipse.platform.releng.tychoeclipsebuilder/sdk/pom.xml
+++ b/eclipse.platform.releng.tychoeclipsebuilder/sdk/pom.xml
@@ -118,6 +118,7 @@
<configuration>
<timeoutMillis>300000</timeoutMillis> <!-- 5 min -->
<continueOnFail>${macSigner.forceContinue}</continueOnFail>
+ <entitlements>${project.basedir}/../entitlement/sdk.entitlement</entitlements>
</configuration>
</execution>
</executions>

Back to the top