Bug 394984: Add signing certificate info to Info.plist files for Firefox and updater. r=bhearsum
authorStephen Pohl <spohl.mozilla.bugs@gmail.com>
Wed, 06 Apr 2016 16:11:00 -0400
changeset 491496 d80412c56b8a3b65172d96846800eaa7b2af95ce
parent 491495 94cc6d062da29b6e93255bd8c39477bec31992d5
child 491497 e5b2aee32e97e78c1ffe46b7c45a32f65528ee77
push id47343
push userbmo:dothayer@mozilla.com
push dateWed, 01 Mar 2017 22:58:58 +0000
reviewersbhearsum
bugs394984
milestone48.0a1
Bug 394984: Add signing certificate info to Info.plist files for Firefox and updater. r=bhearsum
browser/app/macbuild/Contents/Info.plist.in
toolkit/mozapps/update/updater/macbuild/Contents/Info.plist
toolkit/mozapps/update/updater/macbuild/Contents/Info.plist.in
--- a/browser/app/macbuild/Contents/Info.plist.in
+++ b/browser/app/macbuild/Contents/Info.plist.in
@@ -213,12 +213,17 @@
 		<string>10.6.0</string>
 		<key>x86_64</key>
 		<string>10.6.0</string>
 	</dict>
   <key>NSSupportsAutomaticGraphicsSwitching</key>
   <true/>
   <key>NSPrincipalClass</key>
   <string>GeckoNSApplication</string>
+	<key>SMPrivilegedExecutables</key>
+	<dict>
+		<key>org.mozilla.updater</key>
+		<string>identifier "org.mozilla.updater" and ((anchor apple generic and certificate leaf[field.1.2.840.113635.100.6.1.9]) or (anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "43AQ936H96"))</string>
+	</dict>
   <key>NSDisablePersistence</key>
   <true/>
 </dict>
 </plist>
rename from toolkit/mozapps/update/updater/macbuild/Contents/Info.plist
rename to toolkit/mozapps/update/updater/macbuild/Contents/Info.plist.in
--- a/toolkit/mozapps/update/updater/macbuild/Contents/Info.plist
+++ b/toolkit/mozapps/update/updater/macbuild/Contents/Info.plist.in
@@ -26,10 +26,14 @@
 	<string>10.5</string>
 	<key>LSMinimumSystemVersionByArchitecture</key>
 	<dict>
 		<key>i386</key>
 		<string>10.5.0</string>
 		<key>x86_64</key>
 		<string>10.6.0</string>
 	</dict>
+	<key>SMAuthorizedClients</key>
+	<array>
+		<string>identifier "%MOZ_MACBUNDLE_ID%" and ((anchor apple generic and certificate leaf[field.1.2.840.113635.100.6.1.9]) or (anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "43AQ936H96"))</string>
+	</array>
 </dict>
 </plist>