Fixes to 'notarize' target to preserve hardened runtime.
commit36cdaa4845b31ce42a2c4a2f96f25a8ea1225054
authorJohn MacFarlane <jgm@berkeley.edu>
dateSun 22 Mar 2020, 11:00 (7 years ago)
parentc173668
macos/Makefile+2−2
@@ -7,8 +7,8 @@ all: $(ALL)
77
88signed.txt: $(DEST)
99 chmod +x $(DEST)/bin/pandoc $(DEST)/bin/pandoc-citeproc
10− codesign -v $(DEST)/bin/pandoc || codesign -s "5U2WKE6DES" $(DEST)/bin/pandoc
11− codesign -v $(DEST)/bin/pandoc-citeproc || codesign -s "5U2WKE6DES" $(DEST)/bin/pandoc-citeproc
10+ codesign --force --options runtime -s "5U2WKE6DES" $(DEST)/bin/pandoc
11+ codesign --force --options runtime -s "5U2WKE6DES" $(DEST)/bin/pandoc-citeproc
1212 echo "SIGNED" > signed.txt
1313
1414pandoc.pkg: signed.txt