macOS: Use hardened runtime when signing

Follow up of c2398e3067

Change-Id: I003f03097633202585d36a136136d84d8f3c2140
Reviewed-by: Eike Ziller <eike.ziller@qt.io>
This commit is contained in:
Eike Ziller
2020-02-06 18:53:04 +01:00
parent 392690e565
commit ee579b5bf3

View File

@@ -181,7 +181,8 @@ def is_not_debug(path, filenames):
def codesign(app_path): def codesign(app_path):
signing_identity = os.environ.get('SIGNING_IDENTITY') signing_identity = os.environ.get('SIGNING_IDENTITY')
if is_mac_platform() and signing_identity: if is_mac_platform() and signing_identity:
codesign_call = ['codesign', '--force', '--deep', '-s', signing_identity, '-v'] codesign_call = ['codesign', '-o', 'runtime', '--force', '--deep', '-s', signing_identity,
'-v']
signing_flags = os.environ.get('SIGNING_FLAGS') signing_flags = os.environ.get('SIGNING_FLAGS')
if signing_flags: if signing_flags:
codesign_call.extend(signing_flags.split()) codesign_call.extend(signing_flags.split())