Bug 1593072 - Patch 2 - Move existing entitlement files into a v1 directory r=spohl

Move existing entitlement files into a v1 directory and removed unused versions.

Differential Revision: https://phabricator.services.mozilla.com/D187244
This commit is contained in:
Haik Aftandilian
2023-09-18 15:00:10 +00:00
parent 8f1474e0d1
commit 5ab446d22f
9 changed files with 11 additions and 161 deletions

View File

@@ -62,8 +62,9 @@ obtain a Hardened Runtime build with the
``com.apple.security.get-task-allow`` entitlement allowed by submitting
a try build and downloading the dmg generated by the "Rpk" shippable
build job. A debugger can be attached to Firefox processes of these
builds. try builds use the ``developer.entitlements.xml`` file from the
source tree while production builds use ``production.entitlements.xml``.
builds. try builds use the developer entitlement files from the
source tree (allowing debugger attach) while production builds use
the production versions (which must meet notarization requirements).
**On macOS 10.15+, downloaded try builds will not launch by default
because Notarization is required. To workaround this problem, remove the
quarantine extended attribute from the downloaded Nightly:**
@@ -81,11 +82,6 @@ have Hardened Runtime enabled. `Bug
filed to automate codesigning local builds to enable Hardened Runtime by
default and eliminate this discrepancy.
To obtain a Hardened Runtime build without using try infrastructure, a
developer can manually codesign builds using the macOS ``codesign(1)``
command with the ``developer.entitlements.xml`` file from the tree. This
requires creating a codesigning identity.
Disabling System Integrity Protection (SIP)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~