# HG changeset patch
# User Chris Cannam
# Date 1571322785 -3600
# Node ID f6398deea932a9793d8fc7ae05cc13c7aaf5fbd2
# Parent  80c5abeae312d52cd6c9e34e34d7e43d2283e6f7
Attempt to request to load unsigned plugins. Not helping with the plugins that are currently failing.

diff -r 80c5abeae312 -r f6398deea932 deploy/osx/Entitlements.plist
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/deploy/osx/Entitlements.plist	Thu Oct 17 15:33:05 2019 +0100
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<plist version="1.0">
+    <dict>
+        <key>com.apple.security.app-sandbox</key>
+        <false/>
+        <key>com.apple.security.device.audio-input</key>
+        <true/>
+        <key>com.apple.security.cs.disable-library-validation</key>
+        <true/>
+        <key>com.apple.security.cs.allow-jit</key>
+	<true/>
+    </dict>
+</plist>
diff -r 80c5abeae312 -r f6398deea932 deploy/osx/HelperEntitlements.plist
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/deploy/osx/HelperEntitlements.plist	Thu Oct 17 15:33:05 2019 +0100
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<plist version="1.0">
+    <dict>
+        <key>com.apple.security.app-sandbox</key>
+        <false/>
+        <key>com.apple.security.cs.disable-library-validation</key>
+        <true/>
+        <key>com.apple.security.cs.allow-jit</key>
+	<true/>
+    </dict>
+</plist>
diff -r 80c5abeae312 -r f6398deea932 deploy/osx/sign.sh
--- a/deploy/osx/sign.sh	Thu Oct 17 14:48:43 2019 +0100
+++ b/deploy/osx/sign.sh	Thu Oct 17 15:33:05 2019 +0100
@@ -13,15 +13,16 @@
 	exit 2
 fi
 
-# NB at some point we are going to have to include "--options runtime"
-# in all of these codesign invocations, and figure out what to do
-# about signing plugins...
+entitlements=deploy/osx/Entitlements.plist
+helper_entitlements=deploy/osx/HelperEntitlements.plist
 
 for app in "$dir"/*.app; do
     find "$app" -name \*.dylib -print | while read fr; do
-	codesign -s "Developer ID Application: Chris Cannam" -fv --deep "$fr"
+	codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime "$fr"
     done
-    codesign -s "Developer ID Application: Chris Cannam" -fv --deep "$app/Contents/MacOS/Sonic Visualiser"
-    codesign -s "Developer ID Application: Chris Cannam" -fv --deep "$app"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$entitlements" "$app/Contents/MacOS/Sonic Visualiser"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$helper_entitlements" "$app/Contents/MacOS/vamp-plugin-load-checker"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$helper_entitlements" "$app/Contents/MacOS/piper-vamp-simple-server"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$entitlements" "$app"
 done