build(mac): enable hardened runtime

deploy/mac/deploy.cmake

@@ -16,7 +16,7 @@ if (OSX_BUNDLE)
   install(CODE "execute_process(COMMAND
     ${DEPLOYQT}
     \"\${CMAKE_INSTALL_PREFIX}/${CMAKE_PROJECT_PROPER_NAME}.app\"
-    -timestamp \"-codesign=${_codesign_identity}\"
+    -hardened-runtime -timestamp \"-codesign=${_codesign_identity}\"
   )")
   set(CPACK_PACKAGE_ICON "${MY_DIR}/dmg-volume.icns")
   set(CPACK_DMG_BACKGROUND_IMAGE "${MY_DIR}/dmg-background.tiff")

src/apps/deskflow-core/CMakeLists.txt

@@ -50,6 +50,7 @@ if(BUILD_OSX_BUNDLE)
     BUILD_WITH_INSTALL_RPATH TRUE
     INSTALL_RPATH "@loader_path/../Libraries;@loader_path/../Frameworks"
     RUNTIME_OUTPUT_DIRECTORY $<TARGET_BUNDLE_CONTENT_DIR:${CMAKE_PROJECT_PROPER_NAME}>/MacOS
+    XCODE_ATTRIBUTE_ENABLE_HARDENED_RUNTIME YES
   )
   if (APPLE_CODESIGN_DEV)
     configure_mac_codesign(${target})

src/apps/deskflow-gui/CMakeLists.txt

@@ -95,6 +95,7 @@ elseif(APPLE)
     set_target_properties(${target} PROPERTIES
       INSTALL_RPATH "@loader_path/../Libraries;@loader_path/../Frameworks"
       MACOSX_BUNDLE_INFO_PLIST "${CMAKE_CURRENT_BINARY_DIR}/deskflow.plist"
+      XCODE_ATTRIBUTE_ENABLE_HARDENED_RUNTIME YES
     )
     if (APPLE_CODESIGN_DEV)
       configure_mac_codesign(${target})