From 17343403f6e7ff6c27ba610978a1ed06fe14c4af Mon Sep 17 00:00:00 2001
From: Julian Waller <git@julusian.co.uk>
Date: Tue, 9 Jan 2024 20:37:24 +0000
Subject: [PATCH] wip: try entitlements

---
 resources/macos/entitlements.plist | 10 ++++++++++
 tools/build-macos.sh               |  2 +-
 2 files changed, 11 insertions(+), 1 deletion(-)
 create mode 100644 resources/macos/entitlements.plist

diff --git a/resources/macos/entitlements.plist b/resources/macos/entitlements.plist
new file mode 100644
index 00000000..c1bcbf37
--- /dev/null
+++ b/resources/macos/entitlements.plist
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+    <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+  </dict>
+</plist>
\ No newline at end of file
diff --git a/tools/build-macos.sh b/tools/build-macos.sh
index 3b7d354e..92fb33ad 100755
--- a/tools/build-macos.sh
+++ b/tools/build-macos.sh
@@ -54,7 +54,7 @@ mv staging/casparcg-client.app "$CLIENT_FOLDER/$CLIENT_FOLDER.app" || fail "Coul
 # Sign app bundle
 if [ -n "$MACOS_SIGN_NAME" ]; then
     echo "Signing..."
-    codesign --deep --timestamp --options runtime -s "$MACOS_SIGN_NAME" "$CLIENT_FOLDER/$CLIENT_FOLDER.app"
+    codesign --deep --timestamp --options runtime -s "$MACOS_SIGN_NAME" --entitlements "../resources/macos/entitlements.plist" "$CLIENT_FOLDER/$CLIENT_FOLDER.app"
 fi
 
 # Copy documentation