Changeset 83036 in vbox for trunk/src/VBox/Installer/darwin

Timestamp:

Feb 10, 2020 3:57:32 PM (5 years ago)

Author:

vboxsync

Message:

/Config.kmk: Darwin code signing fix for the CCS case (handling the entitlements option), using hardened runtime for Mach-O binaries (should be ignored for kexts). Plus a little cleanup in the darwin installer packaging, avoiding local signing of pkg files which should be handled by CCS. bugref:9466

File:

• trunk/src/VBox/Installer/darwin/Makefile.kmk (modified) (6 diffs)

trunk/src/VBox/Installer/darwin/Makefile.kmk

@@ -238 +238 @@
                 --identifier org.VirtualBox.mpkg.virtualbox \
                 --version $(VBOX_VERSION_MAJOR).$(VBOX_VERSION_MINOR).$(VBOX_VERSION_BUILD) \
-                $(if $(VBOX_MACOSX_INSTALLER_SIGN),--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
+                $(if-expr defined(VBOX_MACOSX_INSTALLER_SIGN) && $(intersects darwin all 1,$(VBOX_WITH_CORP_CODE_SIGNING)) == "",--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
                 $@
 ifdef VBOX_SIGNING_MODE
@@ -298 +298 @@
         $(foreach kext,$(VBOX_DI_KEXTS), \
                 $(NLTAB)$(INSTALL) -m 0755 $(VBOX_PATH_DIST)/$(kext).kext/Contents/MacOS/$(kext) $(VBOX_PATH_PACK_TMP)/VBoxKEXTs.pkg.root/$(kext).kext/Contents/MacOS/)
-        @# Signed the kext bundles.
+        @# Sign the kext bundles.
 ifdef VBOX_SIGNING_MODE
         $(foreach kext,$(VBOX_DI_KEXTS) \
@@ -330 +330 @@
                 --install-location "/Library/Application Support/VirtualBox" \
                 --ownership preserve \
-                $(if $(VBOX_MACOSX_INSTALLER_SIGN),--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
+                $(if-expr defined(VBOX_MACOSX_INSTALLER_SIGN) && $(intersects darwin all 1,$(VBOX_WITH_CORP_CODE_SIGNING)) == "",--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
                 $@
 ifdef VBOX_SIGNING_MODE
@@ -700 +700 @@
                         $(VBOX_PATH_VBOX_APP_TMP)/Contents/MacOS/dtrace/$(file)$(NLTAB))
 endif
-        @# Signed the binaries and the application bundle.
+        @# Sign the binaries and the application bundle.
 ifdef VBOX_SIGNING_MODE
         $(foreach qtmod, $(VBOX_QT_MOD_NAMES) \
@@ -788 +788 @@
                 --ownership preserve \
                 --preserve-xattr \
-                $(if $(VBOX_MACOSX_INSTALLER_SIGN),--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
+                $(if-expr defined(VBOX_MACOSX_INSTALLER_SIGN) && $(intersects darwin all 1,$(VBOX_WITH_CORP_CODE_SIGNING)) == "",--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
                 $@
 ifdef VBOX_SIGNING_MODE
@@ -875 +875 @@
                 --install-location /usr/local/bin \
                 --ownership preserve \
-                $(if $(VBOX_MACOSX_INSTALLER_SIGN),--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
+                $(if-expr defined(VBOX_MACOSX_INSTALLER_SIGN) && $(intersects darwin all 1,$(VBOX_WITH_CORP_CODE_SIGNING)) == "",--sign "$(VBOX_MACOSX_INSTALLER_SIGN)",) \
                 $@
 ifdef VBOX_SIGNING_MODE