| 1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
| 3 | <plist version="1.0"> |
| 4 | <dict> |
| 5 | <!-- Hardened-runtime entitlements required to notarize the Electron |
| 6 | (Chromium + Go service) app. V8's JavaScript engine needs JIT and |
| 7 | writable/executable memory; Electron ships frameworks and helper |
| 8 | binaries that aren't signed with our team ID, so library validation |
| 9 | must accept them. Kept minimal — no network/file entitlements, since |
| 10 | this is a hardened-runtime carve-out, not an App Sandbox profile. --> |
| 11 | <key>com.apple.security.cs.allow-jit</key> |
| 12 | <true/> |
| 13 | <key>com.apple.security.cs.allow-unsigned-executable-memory</key> |
| 14 | <true/> |
| 15 | <key>com.apple.security.cs.disable-library-validation</key> |
| 16 | <true/> |
| 17 | </dict> |
| 18 | </plist> |
| 19 |