summaryrefslogtreecommitdiff
path: root/hardened_runtime.xcent
diff options
context:
space:
mode:
authorChristian Lohmaier <lohmaier+LibreOffice@googlemail.com>2019-05-31 11:57:16 +0200
committerChristian Lohmaier <lohmaier+LibreOffice@googlemail.com>2019-05-31 21:13:31 +0200
commitc98b1f1cd43b3e109bcaf6324ef2d1f449b34099 (patch)
tree82c51b2882da3734ecf06006410acd0e6d935cce /hardened_runtime.xcent
parent1ee64eb345ef116e19a63dc97f791e80ba38fe80 (diff)
macOS: enable hardened runtime when signinglibreoffice-6-3-branch-point
hardened runtime is prerequisite for notarizing apps, which in turn is required for new developer IDs with 10.14.5 already and will be required for all software to run in future versions of macOS https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution Change-Id: Ifdf73fb5901be5dd0b62e1a51dee6e57c9816e5f Reviewed-on: https://gerrit.libreoffice.org/73246 Tested-by: Jenkins Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
Diffstat (limited to 'hardened_runtime.xcent')
-rw-r--r--hardened_runtime.xcent15
1 files changed, 15 insertions, 0 deletions
diff --git a/hardened_runtime.xcent b/hardened_runtime.xcent
new file mode 100644
index 000000000000..72abb432afc6
--- /dev/null
+++ b/hardened_runtime.xcent
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+ <dict>
+ <!-- AppleScript support -->
+ <key>com.apple.security.automation.apple-events</key>
+ <true/>
+ <!-- for extension manager, "exception in synchronize" -->
+ <key>com.apple.security.cs.disable-executable-page-protection</key>
+ <true/>
+ <!-- allow use of third-party plugins/frameworks (aka Java) -->
+ <key>com.apple.security.cs.disable-library-validation</key>
+ <true/>
+ </dict>
+</plist>