Changeset 82963 in vbox for trunk/src/VBox/Installer/darwin

Timestamp:

Feb 3, 2020 5:15:05 PM (5 years ago)

Author:

vboxsync

Message:

Installer/darwin: Separate entitlement files for VM processes and other ones. bugref:9466

File:

• trunk/src/VBox/Installer/darwin/Makefile.kmk (modified) (3 diffs)

trunk/src/VBox/Installer/darwin/Makefile.kmk

@@ -362 +362 @@
 VBOX_DI_VBAPP_PROGS_HARDENED = \
         MacOS/VirtualBoxVM \
+        MacOS/VBoxHeadless \
         MacOS/VBoxNetDHCP \
         MacOS/VBoxNetNAT \
-        MacOS/VBoxHeadless
 
 VBOX_DI_VBAPP_PROGS = \
@@ -584 +584 @@
                  ,) \
                 $(if-expr defined(VBOX_WITH_MACOS_HARDENED_RUNTIME) && defined(VBOX_SIGNING_MODE), \
-                        $(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlements.plist,) \
+                        $(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlements.plist \
+                        $(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlementsVM.plist,) \
                 $(VBOX_DARWIN_INST_DEP_ON_MAKEFILE)
         $(call MSG_TOOL,pkgbuild,,,$@)
@@ -760 +761 @@
         $(call VBOX_SIGN_BUNDLE_FN,$(VBOX_PATH_VBOX_APP_TMP),,--deep)
  ifdef VBOX_WITH_MACOS_HARDENED_RUNTIME # HACK ALERT! --deep fries the entitlements, so redo w/o --deep now.
-        $(foreach bin, $(VBOX_DI_VBAPP_PROGS_HARDENED) \
+        $(foreach bin, $(filter-out MacOS/VirtualBoxVM MacOS/VBoxHeadless,$(VBOX_DI_VBAPP_PROGS_HARDENED)) \
                 , $(NLTAB)$(call VBOX_SIGN_MACHO_FN,$(VBOX_PATH_VBOX_APP_TMP)/Contents/$(bin),org.virtualbox.app.macos.$(notdir $(bin)), \
                                 --entitlements="$(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlements.plist"))
+        $(foreach bin, $(filter MacOS/VirtualBoxVM MacOS/VBoxHeadless,$(VBOX_DI_VBAPP_PROGS_HARDENED)) \
+                , $(NLTAB)$(call VBOX_SIGN_MACHO_FN,$(VBOX_PATH_VBOX_APP_TMP)/Contents/$(bin),org.virtualbox.app.macos.$(notdir $(bin)), \
+                                --entitlements="$(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlementsVM.plist"))
         $(call VBOX_SIGN_BUNDLE_FN,$(VBOX_PATH_VBOX_APP_TMP)/Contents/Resources/VirtualBoxVM.app,,\
-                --entitlements="$(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlements.plist",)
+                --entitlements="$(PATH_ROOT)/src/VBox/HostDrivers/Support/darwin/SUPR3HardenedEntitlementsVM.plist",)
         $(call VBOX_SIGN_BUNDLE_FN,$(VBOX_PATH_VBOX_APP_TMP),,)
         $(foreach bin, $(VBOX_DI_VBAPP_PROGS_HARDENED) \