From cc525c249dfc2d39469a0cd0304d8deea37d4130 Mon Sep 17 00:00:00 2001
From: Fedor Indutny <79877362+indutny-signal@users.noreply.github.com>
Date: Wed, 31 May 2023 12:00:15 -0700
Subject: [PATCH] Use custom entitlements for frameworks/libs

---
 build/entitlements.mac.inherit.plist | 12 ++++++++++++
 build/entitlements.mac.plist         |  2 --
 build/entitlements.mas.inherit.plist | 12 ++++++++++++
 build/entitlements.mas.plist         |  2 --
 package.json                         |  1 +
 5 files changed, 25 insertions(+), 4 deletions(-)
 create mode 100644 build/entitlements.mac.inherit.plist
 create mode 100644 build/entitlements.mas.inherit.plist

diff --git a/build/entitlements.mac.inherit.plist b/build/entitlements.mac.inherit.plist
new file mode 100644
index 000000000..89669a38c
--- /dev/null
+++ b/build/entitlements.mac.inherit.plist
@@ -0,0 +1,12 @@
+<!-- Copyright 2019 Signal Messenger, LLC -->
+<!-- SPDX-License-Identifier: AGPL-3.0-only -->
+
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <!-- https://github.com/electron/electron-notarize#prerequisites -->
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+  </dict>
+</plist>
diff --git a/build/entitlements.mac.plist b/build/entitlements.mac.plist
index 5d035c990..1c094b1aa 100644
--- a/build/entitlements.mac.plist
+++ b/build/entitlements.mac.plist
@@ -7,8 +7,6 @@
   <dict>
     <key>com.apple.security.cs.allow-jit</key>
     <true/>
-    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-    <true/>
     <key>com.apple.security.device.audio-input</key>
     <true/>
     <key>com.apple.security.device.microphone</key>
diff --git a/build/entitlements.mas.inherit.plist b/build/entitlements.mas.inherit.plist
new file mode 100644
index 000000000..89669a38c
--- /dev/null
+++ b/build/entitlements.mas.inherit.plist
@@ -0,0 +1,12 @@
+<!-- Copyright 2019 Signal Messenger, LLC -->
+<!-- SPDX-License-Identifier: AGPL-3.0-only -->
+
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <!-- https://github.com/electron/electron-notarize#prerequisites -->
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+  </dict>
+</plist>
diff --git a/build/entitlements.mas.plist b/build/entitlements.mas.plist
index 2863ba3c6..4603c560a 100644
--- a/build/entitlements.mas.plist
+++ b/build/entitlements.mas.plist
@@ -9,8 +9,6 @@
     <true/>
     <key>com.apple.security.cs.allow-jit</key>
     <true/>
-    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-    <true/>
     <key>com.apple.security.device.audio-input</key>
     <true/>
     <key>com.apple.security.device.microphone</key>
diff --git a/package.json b/package.json
index 615415e12..d73c66a1b 100644
--- a/package.json
+++ b/package.json
@@ -326,6 +326,7 @@
       "darkModeSupport": true,
       "hardenedRuntime": true,
       "entitlements": "./build/entitlements.mac.plist",
+      "entitlementsInherit": "./build/entitlements.mac.inherit.plist",
       "icon": "build/icons/mac/icon.icns",
       "publish": [
         {