From df4294e949e3b4f7aeb88b55c0eb4e038dd0416a Mon Sep 17 00:00:00 2001 From: Luiz Sardinha Date: Wed, 19 Aug 2026 17:08:50 +0200 Subject: [PATCH] build(mac): enable hardened runtime --- deploy/mac/deploy.cmake | 2 +- src/apps/deskflow-core/CMakeLists.txt | 1 + src/apps/deskflow-gui/CMakeLists.txt | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/deploy/mac/deploy.cmake b/deploy/mac/deploy.cmake index 972d010a1..1b1523b5b 100644 --- a/deploy/mac/deploy.cmake +++ b/deploy/mac/deploy.cmake @@ -16,7 +16,7 @@ if (OSX_BUNDLE) install(CODE "execute_process(COMMAND ${DEPLOYQT} \"\${CMAKE_INSTALL_PREFIX}/${CMAKE_PROJECT_PROPER_NAME}.app\" - -timestamp \"-codesign=${_codesign_identity}\" + -hardened-runtime -timestamp \"-codesign=${_codesign_identity}\" )") set(CPACK_PACKAGE_ICON "${MY_DIR}/dmg-volume.icns") set(CPACK_DMG_BACKGROUND_IMAGE "${MY_DIR}/dmg-background.tiff") diff --git a/src/apps/deskflow-core/CMakeLists.txt b/src/apps/deskflow-core/CMakeLists.txt index d1715a3d9..145dd3988 100644 --- a/src/apps/deskflow-core/CMakeLists.txt +++ b/src/apps/deskflow-core/CMakeLists.txt @@ -50,6 +50,7 @@ if(BUILD_OSX_BUNDLE) BUILD_WITH_INSTALL_RPATH TRUE INSTALL_RPATH "@loader_path/../Libraries;@loader_path/../Frameworks" RUNTIME_OUTPUT_DIRECTORY $/MacOS + XCODE_ATTRIBUTE_ENABLE_HARDENED_RUNTIME YES ) if (APPLE_CODESIGN_DEV) configure_mac_codesign(${target}) diff --git a/src/apps/deskflow-gui/CMakeLists.txt b/src/apps/deskflow-gui/CMakeLists.txt index b349c2385..b2c3cbb43 100644 --- a/src/apps/deskflow-gui/CMakeLists.txt +++ b/src/apps/deskflow-gui/CMakeLists.txt @@ -95,6 +95,7 @@ elseif(APPLE) set_target_properties(${target} PROPERTIES INSTALL_RPATH "@loader_path/../Libraries;@loader_path/../Frameworks" MACOSX_BUNDLE_INFO_PLIST "${CMAKE_CURRENT_BINARY_DIR}/deskflow.plist" + XCODE_ATTRIBUTE_ENABLE_HARDENED_RUNTIME YES ) if (APPLE_CODESIGN_DEV) configure_mac_codesign(${target})