scriptoriumadmin/zotero
1
0
Fork 0
mirror of https://github.com/zotero/zotero.git synced 2026-10-07 02:58:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Re-sign Mozilla helper apps in unsigned Mac builds with custom components

Browse source 
Mozilla's helper apps (GPU, content, etc.) use the hardened runtime and
Mozilla's Team ID, so in unsigned builds they couldn't load our custom
libmozglue.dylib and failed to launch. Re-sign them ad hoc.

(cherry picked from commit df78b51dab)
This commit is contained in:
Dan Stillman 2026-09-28 13:43:21 -04:00
parent dcf6df66e2
commit 2015f9a910
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
app/build.sh
View file

@ -872,6 +872,13 @@ if [ $BUILD_MAC == 1 ]; then
echo
/usr/bin/codesign --verify -vvvv "$appex"
done
elif [ -n "$custom_components_hash_mac" ]; then
# Mozilla's helper apps (plugin-container, GPU helper, etc.) are signed with Mozilla's Team ID
# and the hardened runtime, so without our signature they can't load custom components such as
# libmozglue.dylib and fail to launch. Re-sign them ad hoc, which removes both. (Signed builds
# re-sign everything with our Developer ID above.)
find "$APPDIR/Contents/MacOS" -maxdepth 1 -name '*.app' -not -name "updater.app" -print0 \
| xargs -0 /usr/bin/codesign --force --sign -
fi
# Build and notarize disk image