changeset 2385:f6398deea932

Attempt to request to load unsigned plugins. Not helping with the plugins that are currently failing.
author Chris Cannam
date Thu, 17 Oct 2019 15:33:05 +0100
parents 80c5abeae312
children acb490d5ef0b
files deploy/osx/Entitlements.plist deploy/osx/HelperEntitlements.plist deploy/osx/sign.sh
diffstat 3 files changed, 31 insertions(+), 6 deletions(-) [+]
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/deploy/osx/Entitlements.plist	Thu Oct 17 15:33:05 2019 +0100
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<plist version="1.0">
+    <dict>
+        <key>com.apple.security.app-sandbox</key>
+        <false/>
+        <key>com.apple.security.device.audio-input</key>
+        <true/>
+        <key>com.apple.security.cs.disable-library-validation</key>
+        <true/>
+        <key>com.apple.security.cs.allow-jit</key>
+	<true/>
+    </dict>
+</plist>
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/deploy/osx/HelperEntitlements.plist	Thu Oct 17 15:33:05 2019 +0100
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<plist version="1.0">
+    <dict>
+        <key>com.apple.security.app-sandbox</key>
+        <false/>
+        <key>com.apple.security.cs.disable-library-validation</key>
+        <true/>
+        <key>com.apple.security.cs.allow-jit</key>
+	<true/>
+    </dict>
+</plist>
--- a/deploy/osx/sign.sh	Thu Oct 17 14:48:43 2019 +0100
+++ b/deploy/osx/sign.sh	Thu Oct 17 15:33:05 2019 +0100
@@ -13,15 +13,16 @@
 	exit 2
 fi
 
-# NB at some point we are going to have to include "--options runtime"
-# in all of these codesign invocations, and figure out what to do
-# about signing plugins...
+entitlements=deploy/osx/Entitlements.plist
+helper_entitlements=deploy/osx/HelperEntitlements.plist
 
 for app in "$dir"/*.app; do
     find "$app" -name \*.dylib -print | while read fr; do
-	codesign -s "Developer ID Application: Chris Cannam" -fv --deep "$fr"
+	codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime "$fr"
     done
-    codesign -s "Developer ID Application: Chris Cannam" -fv --deep "$app/Contents/MacOS/Sonic Visualiser"
-    codesign -s "Developer ID Application: Chris Cannam" -fv --deep "$app"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$entitlements" "$app/Contents/MacOS/Sonic Visualiser"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$helper_entitlements" "$app/Contents/MacOS/vamp-plugin-load-checker"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$helper_entitlements" "$app/Contents/MacOS/piper-vamp-simple-server"
+    codesign -s "Developer ID Application: Chris Cannam" -fv --deep --options runtime --entitlements "$entitlements" "$app"
 done