1543830 - Add Mac Hardened Runtime entitlement files to the tree

Status: RESOLVED FIXED

(Firefox Build System :: General, defect, P1)

Description

[Haik Aftandilian [:haik]]

This bug is filed to cover landing hardened runtime entitlement files that will be used with the codesign command by release engineering to set the appropriate flags needed for notarization and hardened runtime.

Comment 1

[Haik Aftandilian [:haik]]

Attachment: Bug 1543830 - Add Mac Hardened Runtime entitlement files to the tree r?spohl

Add entitlement files for Hardened Runtime configuration to be used by Release Engineering for official builds and try builds and developers for local builds. These entitlement files are input to the codesign command.

Hardened Runtime and codesigning is not yet enabled for local builds or try builds so for now these files will only be used by Release Engineering.

production.entitlements.xml is intended to be used for official channel builds that will be codesigned, notarized, and shipped to users.

developer.entitlements.xml is intended to be used for developer and try builds that will be codesigned, but not notarized or shipped to users. The developer file enables debugging which is not compatible with notarization, but is otherwise the same as the production file.

codesign.bash is a stop-gap script to allow developers who setup Apple Developer ID certificates to codesign Nightly themselves and enabled Hardened Runtime.

Comment 2

[Haik Aftandilian [:haik]]

Attachment: Test code for video capture sandbox test - do not land

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/4e7be2db653e
Add Mac Hardened Runtime entitlement files to the tree r=spohl

Comment 4

[Arthur Iakab [arthur_iakab]]

https://hg.mozilla.org/mozilla-central/rev/4e7be2db653e

Comment 5

[Ryan VanderMeulen [:RyanVM]]

Aki pushed this to ESR60 to fix OSX signing bustage after uplifting the Notarization changes.
https://hg.mozilla.org/releases/mozilla-esr60/rev/95e9e64fecd8729236b9c7ee7c6f2687f4abaa7a