From eba553413c65f60f2b892e103bbcb45284f975a0 Mon Sep 17 00:00:00 2001 From: edde746 <86283021+edde746@users.noreply.github.com> Date: Mon, 1 Jun 2026 02:43:42 +0200 Subject: [PATCH] fix(macos): allow LuaJIT under hardened runtime close #1214 --- .github/workflows/build.yml | 5 +++++ macos/Runner/Release.entitlements | 4 ++++ 2 files changed, 9 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index d75ab123..71bffb79 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -299,6 +299,11 @@ jobs: APP_PATH="build/macos/Build/Products/Release/Plezy.app" echo "Verifying signature..." codesign -dvvv "$APP_PATH" + echo "Verifying signed entitlements..." + codesign -d --entitlements :- "$APP_PATH" > "$RUNNER_TEMP/macos-entitlements.plist" + /usr/libexec/PlistBuddy -c "Print" "$RUNNER_TEMP/macos-entitlements.plist" + /usr/libexec/PlistBuddy -c "Print :com.apple.security.cs.allow-jit" "$RUNNER_TEMP/macos-entitlements.plist" + /usr/libexec/PlistBuddy -c "Print :com.apple.security.cs.allow-unsigned-executable-memory" "$RUNNER_TEMP/macos-entitlements.plist" codesign --verify --deep --strict --verbose=2 "$APP_PATH" - name: Notarize Application diff --git a/macos/Runner/Release.entitlements b/macos/Runner/Release.entitlements index 04315f36..1fa821e3 100644 --- a/macos/Runner/Release.entitlements +++ b/macos/Runner/Release.entitlements @@ -4,6 +4,10 @@ com.apple.security.app-sandbox + com.apple.security.cs.allow-jit + + com.apple.security.cs.allow-unsigned-executable-memory + com.apple.security.network.client com.apple.security.files.user-selected.read-write