Bug 394984: Add signing certificate info to Info.plist files for Firefox and updater. r=bhearsum
authorStephen Pohl <spohl.mozilla.bugs@gmail.com>
Tue, 24 May 2016 22:25:52 -0400
changeset 337884 f12cdffc7f1ed51a790f8a57a8f57768d648691a
parent 337883 0cd11745dc4526123de7a67d80c0084e5e089e85
child 337885 281d032de5ae9c4262903311e2cb3079acd2b9b3
push id6249
push userjlund@mozilla.com
push dateMon, 01 Aug 2016 13:59:36 +0000
treeherdermozilla-beta@bad9d4f5bf7e [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersbhearsum
bugs394984
milestone49.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 394984: Add signing certificate info to Info.plist files for Firefox and updater. r=bhearsum
browser/app/macbuild/Contents/Info.plist.in
toolkit/mozapps/update/updater/macbuild/Contents/Info.plist
toolkit/mozapps/update/updater/macbuild/Contents/Info.plist.in
--- a/browser/app/macbuild/Contents/Info.plist.in
+++ b/browser/app/macbuild/Contents/Info.plist.in
@@ -206,12 +206,17 @@
 	<key>LSApplicationCategoryType</key>
 	<string>public.app-category.productivity</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>10.9.0</string>
   <key>NSSupportsAutomaticGraphicsSwitching</key>
   <true/>
   <key>NSPrincipalClass</key>
   <string>GeckoNSApplication</string>
+	<key>SMPrivilegedExecutables</key>
+	<dict>
+		<key>org.mozilla.updater</key>
+		<string>identifier "org.mozilla.updater" and ((anchor apple generic and certificate leaf[field.1.2.840.113635.100.6.1.9]) or (anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "43AQ936H96"))</string>
+	</dict>
   <key>NSDisablePersistence</key>
   <true/>
 </dict>
 </plist>
rename from toolkit/mozapps/update/updater/macbuild/Contents/Info.plist
rename to toolkit/mozapps/update/updater/macbuild/Contents/Info.plist.in
--- a/toolkit/mozapps/update/updater/macbuild/Contents/Info.plist
+++ b/toolkit/mozapps/update/updater/macbuild/Contents/Info.plist.in
@@ -26,10 +26,14 @@
 	<string>10.5</string>
 	<key>LSMinimumSystemVersionByArchitecture</key>
 	<dict>
 		<key>i386</key>
 		<string>10.5.0</string>
 		<key>x86_64</key>
 		<string>10.6.0</string>
 	</dict>
+	<key>SMAuthorizedClients</key>
+	<array>
+		<string>identifier "%MOZ_MACBUNDLE_ID%" and ((anchor apple generic and certificate leaf[field.1.2.840.113635.100.6.1.9]) or (anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = "43AQ936H96"))</string>
+	</array>
 </dict>
 </plist>