From ee579b5bf3fc1407685afb78404baa593d2fc6f7 Mon Sep 17 00:00:00 2001 From: Eike Ziller Date: Thu, 6 Feb 2020 18:53:04 +0100 Subject: macOS: Use hardened runtime when signing Follow up of c2398e3067e425c3d21f9e1ef91f26feecefc372 Change-Id: I003f03097633202585d36a136136d84d8f3c2140 Reviewed-by: Eike Ziller --- scripts/common.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/common.py b/scripts/common.py index 91ff78ad4e..10287ce693 100644 --- a/scripts/common.py +++ b/scripts/common.py @@ -181,7 +181,8 @@ def is_not_debug(path, filenames): def codesign(app_path): signing_identity = os.environ.get('SIGNING_IDENTITY') if is_mac_platform() and signing_identity: - codesign_call = ['codesign', '--force', '--deep', '-s', signing_identity, '-v'] + codesign_call = ['codesign', '-o', 'runtime', '--force', '--deep', '-s', signing_identity, + '-v'] signing_flags = os.environ.get('SIGNING_FLAGS') if signing_flags: codesign_call.extend(signing_flags.split()) -- cgit v1.2.1