From cad320b4e081c75d09d92322260dfcd49f4207e3 Mon Sep 17 00:00:00 2001
From: zzoro <zrarsa@icloud.com>
Date: Mon, 16 Nov 2020 04:40:41 -0500
Subject: [PATCH] Add app entitlements + codesign script Because I managed to
 leave them untracked in the last commit.

---
 macos/codesign.sh        |  8 ++++++++
 macos/entitlements.plist | 26 ++++++++++++++++++++++++++
 2 files changed, 34 insertions(+)
 create mode 100755 macos/codesign.sh
 create mode 100644 macos/entitlements.plist

diff --git a/macos/codesign.sh b/macos/codesign.sh
new file mode 100755
index 00000000..ecf52b19
--- /dev/null
+++ b/macos/codesign.sh
@@ -0,0 +1,8 @@
+#!/bin/bash
+
+IDENTITY="$1"
+if [[ $IDENTITY == "" ]]; then
+    IDENTITY=-
+fi
+
+  codesign -vfs $IDENTITY --entitlements "${MESON_SOURCE_ROOT}/macos/entitlements.plist" --deep -o runtime "${MESON_INSTALL_PREFIX}"
\ No newline at end of file
diff --git a/macos/entitlements.plist b/macos/entitlements.plist
new file mode 100644
index 00000000..2b052af1
--- /dev/null
+++ b/macos/entitlements.plist
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="utf-8"?>
+<plist version="1.0">
+    <dict>
+        <!--App sandbox entitlements: https://developer.apple.com/documentation/security/app_sandbox?language=objc -->
+        <!--Hardened runtime entitlements: https://developer.apple.com/documentation/security/hardened_runtime?language=objc-->
+        <key>com.apple.security.app-sandbox</key>
+        <true/>
+
+        <key>com.apple.security.network.client</key>
+        <false/>
+        <key>com.apple.security.network.server</key>
+        <false/>
+        <key>com.apple.security.files.user-selected.read-write</key>
+        <true/>
+        <key>com.apple.security.files.downloads.read-write</key>
+        <true/>
+        <key>com.apple.security.assets.pictures.read-write</key>
+        <true/>
+        <key>com.apple.security.cs.disable-library-validation</key>
+        <true/>
+        <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+        <false/>
+        <key>com.apple.security.cs.allow-jit</key>
+        <false/>
+    </dict>
+</plist>
\ No newline at end of file