Add entitlements to lldb-mi when building

2021-03-08 17:56:05 -08:00
3 changed files with 29 additions and 0 deletions
@@ -0,0 +1,6 @@
+This folder contains the entitlements needed for the debugger to run on macOS. 
+
+We use the entitlements that the .net runtime uses. See https://github.com/dotnet/runtime/blob/57678512d214af368ff055f358c5106f1aa19ac4/eng/pipelines/common/entitlements.plist
+
+Related Links:
+https://docs.microsoft.com/en-us/dotnet/core/install/macos-notarization-issues#default-entitlements
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-jit</key>
+      <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+      <true/>
+    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+      <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+      <true/>
+    <key>com.apple.security.cs.debugger</key>
+      <true/>
+    <key>com.apple.security.get-task-allow</key>
+      <true/>
+    <key>com.apple.security.task_for_pid-allow</key>
+      <true/>
+  </dict>
+</plist>
@@ -113,6 +113,9 @@ jobs:
        # Set rpath next to the lldb-mi executable LLDB.Framework
        log_and_exec_cmd "install_name_tool -add_rpath @executable_path/. ./debugAdapters/lldb-mi/bin/lldb-mi"

+        # Add entitlements
+        log_and_exec_cmd "codesign -s - -f --entitlements $(Build.SourcesDirectory)/Build/lldb-mi/debugger-entitlements.plist ./debugAdapters/lldb-mi/bin/lldb-mi"
+
        # Grab NOTICE.TXT
        cp $(Build.SourcesDirectory)/Build/lldb-mi/NOTICE.TXT ./debugAdapters/lldb-mi/.