[adonthell-wastesedge-commits] master 8fdfd39: UPDATED to enable sandbox for App bundle

[Kai Sterker]

branch: master
commit 8fdfd39ae8b93559ef4afe71e0de98f9fe283430
Author: Kai Sterker <address@hidden>
Commit: Kai Sterker <address@hidden>

    UPDATED to enable sandbox for App bundle
---
 Makefile.am       |  9 +++++----
 osx/make_dmg.sh   | 17 ++++++++++++++++-
 osx/sandbox.plist | 10 ++++++++++
 3 files changed, 31 insertions(+), 5 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 3fabe8a..14d0d8a 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -9,11 +9,12 @@ dist_desktop_DATA = wastesedge.desktop
 
 dist_man_MANS = adonthell-wastesedge.6
 
-EXTRA_DIST = config.rpath mkinstalldirs PLAYING autogen.sh ABOUT-NLS \
-       wastesedge.spec.in wastesedge.spec wastesedge.desktop.in \
+EXTRA_DIST = config.rpath mkinstalldirs PLAYING autogen.sh ABOUT-NLS          \
+       wastesedge.spec.in wastesedge.spec wastesedge.desktop.in              \
        win32/COPYING win32/make_msi.sh win32/wastesedge.ico win32/icon32.bmp \
-       win32/wastesedge.wxs osx/background.png osx/make_dmg.sh osx/settings.py 
\
-       osx/adonthell.icns make_linux_appimg.sh make_osx_bundle.sh \
+       win32/wastesedge.wxs osx/background.png osx/make_dmg.sh               \
+       osx/sandbox.plist osx/settings.py osx/adonthell.icns                  \
+       osx/adonthell.icns make_linux_appimg.sh make_osx_bundle.sh            \
        make_windows_pkg.sh doc/user_guide.odt
 
 bin_SCRIPTS = adonthell-wastesedge
diff --git a/osx/make_dmg.sh b/osx/make_dmg.sh
index cc65ddc..0afec2f 100755
--- a/osx/make_dmg.sh
+++ b/osx/make_dmg.sh
@@ -35,7 +35,22 @@ adonthell_ver=`$bundle/Contents/MacOS/$adonthell_exe -v`
 # -- codesign Adonthell.App
 if [ ! -z "$CODESIGN_IDENTITY" ]; then
   echo "Signing $bundle as $CODESIGN_IDENTITY"
-  codesign -s "$CODESIGN_IDENTITY" --force --deep $bundle
+  codesign -s "$CODESIGN_IDENTITY" --entitlements sandbox.plist --force --deep 
$bundle
+  cat > $bundle/Contents/Resources/container-migration.plist <<EOF
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" 
"http://www.apple.com/DTDs/PropertyList-1.0.dtd";>
+<plist version="1.0">
+<dict>
+        <key>Move</key>
+        <array>
+                <array>
+                        <string>\${ApplicationSupport}/Adonthell</string>
+                        <string>\${ApplicationSupport}/Adonthell</string>
+                </array>
+        </array>
+</dict>
+</plist>
+EOF
 else
   echo "CODESIGN_IDENTITY not defined. Will not sign Adonthell.app"
 fi
diff --git a/osx/sandbox.plist b/osx/sandbox.plist
new file mode 100644
index 0000000..95ff95a
--- /dev/null
+++ b/osx/sandbox.plist
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<plist version="1.0">
+    <dict>
+        <key>com.apple.security.app-sandbox</key>
+        <true/>
+       <key>com.apple.security.device.usb</key>
+       <true/>
+    </dict>
+</plist>
+