Bug 1558082 - Port bug 1471004: add entitlements url for hardened runtime signing. r=aki
authorRob Lemley <rob@thunderbird.net>
Tue, 11 Jun 2019 21:48:25 +0000
changeset 35961 d1433086b124fed82e3a4883861648012e5e61fc
parent 35960 afd5ed44f8ba8fb200acbe437669df4e418d5dc7
child 35962 9f2d18f74b1517f68e06a96970ad0736aedce2a9
push id392
push userclokep@gmail.com
push dateMon, 02 Sep 2019 20:17:19 +0000
reviewersaki
bugs1558082, 1471004
Bug 1558082 - Port bug 1471004: add entitlements url for hardened runtime signing. r=aki Use an in-tree entitlements file (path is relative to $moztopsrcdir). Use the same files as Firefox. There shouldn't be any changes needed for Thunderbird. Ported from D33859 Depends on D34636 Differential Revision: https://phabricator.services.mozilla.com/D34637
taskcluster/ci/config.yml
--- a/taskcluster/ci/config.yml
+++ b/taskcluster/ci/config.yml
@@ -151,8 +151,15 @@ workers:
 
 mac-notarization:
     mac-behavior:
         by-release-type:
             nightly.*: mac_notarize
             beta.*: mac_notarize
             release.*: mac_notarize
             default: mac_sign_and_pkg
+    mac-entitlements:
+        by-platform:
+            macosx64.*:
+                by-project:
+                    comm-(central|beta|esr68): security/mac/hardenedruntime/production.entitlements.xml
+                    default: security/mac/hardenedruntime/developer.entitlements.xml
+            default: ''