One of our existing apps is not working with Catalina. I think it’s failing now because Apple have enforced hardened runtime requirements.
Currently our release steps are
1, Build with xojo
2, Create an installer in Packagemaker filename.pkg (as we have to include a kext file and scripts)
3, Sign app.pkg in terminal with code
productsign --sign Developer ID Installer: xxxx (xxx) /Users/xxx/Documents/Link/filename.pkg
/Users/xxx/Documents/Link/signedfilename.pkg
4, Notorize with appwrapper
This was all working until the last couple of weeks.
I understand I need to an entitlements.plist file with contents
<?xml version="1.0" encoding="UTF-8"?> com.apple.security.cs.allow-jit com.apple.security.cs.allow-unsigned-executable-memory com.apple.security.cs.allow-dyld-environment-variables com.apple.security.cs.disable-library-validation com.apple.security.cs.disable-executable-page-protectionbut I am not sure how to “bake” this into the app. Can I simply add this to the installer before creating the package?
Unfortunately the Mac we have is not able to be upgraded to Catalina (oh we do hate it when Apple do this), do I have to build the xojo app in Catalina or can I still do it in High Sierra?
Any thoughts?