Bug 1593072 - Patch 2 - Move existing entitlement files into a v1 directory r=spohl
Move existing entitlement files into a v1 directory and removed unused versions. Differential Revision: https://phabricator.services.mozilla.com/D187244
This commit is contained in:
@@ -62,8 +62,9 @@ obtain a Hardened Runtime build with the
|
||||
``com.apple.security.get-task-allow`` entitlement allowed by submitting
|
||||
a try build and downloading the dmg generated by the "Rpk" shippable
|
||||
build job. A debugger can be attached to Firefox processes of these
|
||||
builds. try builds use the ``developer.entitlements.xml`` file from the
|
||||
source tree while production builds use ``production.entitlements.xml``.
|
||||
builds. try builds use the developer entitlement files from the
|
||||
source tree (allowing debugger attach) while production builds use
|
||||
the production versions (which must meet notarization requirements).
|
||||
**On macOS 10.15+, downloaded try builds will not launch by default
|
||||
because Notarization is required. To workaround this problem, remove the
|
||||
quarantine extended attribute from the downloaded Nightly:**
|
||||
@@ -81,11 +82,6 @@ have Hardened Runtime enabled. `Bug
|
||||
filed to automate codesigning local builds to enable Hardened Runtime by
|
||||
default and eliminate this discrepancy.
|
||||
|
||||
To obtain a Hardened Runtime build without using try infrastructure, a
|
||||
developer can manually codesign builds using the macOS ``codesign(1)``
|
||||
command with the ``developer.entitlements.xml`` file from the tree. This
|
||||
requires creating a codesigning identity.
|
||||
|
||||
Disabling System Integrity Protection (SIP)
|
||||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||
|
||||
|
||||
Reference in New Issue
Block a user