Enabled sandbox

insidegui · Oct 28, 2018 · bab11dd · bab11dd
1 parent 1e89f84
commit bab11dd
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 1 deletion.
diff --git a/CAARPlayer.xcodeproj/project.pbxproj b/CAARPlayer.xcodeproj/project.pbxproj
@@ -47,6 +47,7 @@
 /* End PBXCopyFilesBuildPhase section */
 
 /* Begin PBXFileReference section */
+		DD268A51218621E50041CA7D /* CAARPlayer.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = CAARPlayer.entitlements; sourceTree = "<group>"; };
 		DD7F28761F37C442004D8851 /* CAARPlayer.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = CAARPlayer.app; sourceTree = BUILT_PRODUCTS_DIR; };
 		DD7F28791F37C442004D8851 /* AppDelegate.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AppDelegate.h; sourceTree = "<group>"; };
 		DD7F287A1F37C442004D8851 /* AppDelegate.m */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.objc; path = AppDelegate.m; sourceTree = "<group>"; };
@@ -109,6 +110,7 @@
 		DD7F28781F37C442004D8851 /* CAARPlayer */ = {
 			isa = PBXGroup;
 			children = (
+				DD268A51218621E50041CA7D /* CAARPlayer.entitlements */,
 				DDB6043F1F37D0AE008E8518 /* Resources */,
 				DDB6043C1F37D086008E8518 /* Core */,
 				DDB6043D1F37D089008E8518 /* Views */,
@@ -234,8 +236,11 @@
 					DD7F28751F37C442004D8851 = {
 						CreatedOnToolsVersion = 9.0;
 						SystemCapabilities = {
+							com.apple.HardenedRuntime = {
+								enabled = 1;
+							};
 							com.apple.Sandbox = {
-								enabled = 0;
+								enabled = 1;
 							};
 						};
 					};
@@ -435,8 +440,10 @@
 			isa = XCBuildConfiguration;
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_ENTITLEMENTS = CAARPlayer/CAARPlayer.entitlements;
 				COMBINE_HIDPI_IMAGES = YES;
 				DEVELOPMENT_TEAM = 8C7439RJLG;
+				ENABLE_HARDENED_RUNTIME = YES;
 				INFOPLIST_FILE = CAARPlayer/Resources/Info.plist;
 				LD_RUNPATH_SEARCH_PATHS = "$(inherited) @executable_path/../Frameworks";
 				MACOSX_DEPLOYMENT_TARGET = 10.11;
@@ -449,8 +456,10 @@
 			isa = XCBuildConfiguration;
 			buildSettings = {
 				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CODE_SIGN_ENTITLEMENTS = CAARPlayer/CAARPlayer.entitlements;
 				COMBINE_HIDPI_IMAGES = YES;
 				DEVELOPMENT_TEAM = 8C7439RJLG;
+				ENABLE_HARDENED_RUNTIME = YES;
 				INFOPLIST_FILE = CAARPlayer/Resources/Info.plist;
 				LD_RUNPATH_SEARCH_PATHS = "$(inherited) @executable_path/../Frameworks";
 				MACOSX_DEPLOYMENT_TARGET = 10.11;

diff --git a/CAARPlayer/CAARPlayer.entitlements b/CAARPlayer/CAARPlayer.entitlements
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.files.user-selected.read-only</key>
+	<true/>
+</dict>
+</plist>