fix: SDA-1749: Enable code signing for third party binaries (#874)

* SDA-1749: add all binaries for signing

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>

* SDA-1749: add hardened run time attribute

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>

* SDA-1749: reformat package.json

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>

* SDA-1749: add echo for copying libraries

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>

* SDA-1749: codesign exec files manually

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>

* SDA-1749: codesign exec files with hardened runtime

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>

* SDA-1749: codesign exec files with hardened runtime

Signed-off-by: Vishwas Shashidhar <vishwas.shashidhar@symphony.com>
This commit is contained in:
Vishwas Shashidhar 2020-02-13 23:41:16 +05:30 committed by GitHub
parent 650b2613e5
commit 284ec984e6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 20 additions and 5 deletions

8
package-lock.json generated
View File

@ -13060,13 +13060,13 @@
}
},
"screen-share-indicator-frame": {
"version": "1.0.0",
"resolved": "git+https://github.com/symphonyoss/ScreenShareIndicatorFrame.git#52a5ce71de68202316e19faa22971b5590a9836f",
"version": "1.1.0",
"resolved": "git+https://github.com/symphonyoss/ScreenShareIndicatorFrame.git#14cf6452610252458650056d568918345abf4eb4",
"optional": true
},
"screen-snippet": {
"version": "1.0.5",
"resolved": "git+https://github.com/symphonyoss/ScreenSnippet2.git#f46b220dd10db61bcf2b296d32de63e3e46802bb",
"version": "1.0.6",
"resolved": "git+https://github.com/symphonyoss/ScreenSnippet2.git#c493f35831d7bf2a8164945f83c2669781dde3a7",
"optional": true
},
"semver": {

View File

@ -54,7 +54,17 @@
"category": "public.app-category.business",
"icon": "images/icon.icns",
"entitlements": "entitlements.mac.plist",
"entitlementsInherit": "entitlements.mac.plist"
"entitlementsInherit": "entitlements.mac.plist",
"gatekeeperAssess": true,
"hardenedRuntime": true,
"binaries": [
"library/lz4.exec",
"library/indexvalidator.exec",
"library/libsymphonysearch.dylib",
"library/cryptoLib.dylib",
"library/dictionary",
"installer/mac/SymphonySettingsPlugin.bundle/Contents/MacOS/SymphonySettingsPlugin"
]
},
"win": {
"icon": "images/icon.ico",

View File

@ -65,8 +65,13 @@ if [ ! -d "$HOME/tronlibraries/library" ]; then
echo 'Search libraries do not exist! Not building with swift search' >&2
else
cp -r "$HOME/tronlibraries/library" .
echo 'Copied search libraries'
ls -lrth $HOME/tronlibraries/library
fi
codesign --force --options runtime -s "Developer ID Application: Symphony Communication Services LLC" library/lz4.exec
codesign --force --options runtime -s "Developer ID Application: Symphony Communication Services LLC" library/indexvalidator.exec
PKG_VERSION=$(node -e "console.log(require('./package.json').version);")
# Install app dependencies