@@ -135,32 +135,15 @@ fi
135135136136ENT_TMP_DIR=$(mktemp -d -t openclaw-entitlements.XXXXXX)
137137trap cleanup EXIT
138-ENT_TMP_BASE="$ENT_TMP_DIR/base.plist"
139-ENT_TMP_APP_BASE="$ENT_TMP_DIR/app-base.plist"
140-ENT_TMP_RUNTIME="$ENT_TMP_DIR/runtime.plist"
138+ENT_TMP_APP="$ENT_TMP_DIR/app.plist"
141139142140options_args=()
143141if [[ "$IDENTITY" != "-" ]]; then
144142 options_args=("--options" "runtime")
145143fi
146144timestamp_args=("$timestamp_arg")
147145148-cat > "$ENT_TMP_BASE" <<'PLIST'
149-<?xml version="1.0" encoding="UTF-8"?>
150-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
151-<plist version="1.0">
152-<dict>
153- <key>com.apple.security.automation.apple-events</key>
154- <true/>
155- <key>com.apple.security.device.audio-input</key>
156- <true/>
157- <key>com.apple.security.device.camera</key>
158- <true/>
159-</dict>
160-</plist>
161-PLIST
162-163-cat > "$ENT_TMP_APP_BASE" <<'PLIST'
146+cat > "$ENT_TMP_APP" <<'PLIST'
164147<?xml version="1.0" encoding="UTF-8"?>
165148<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
166149<plist version="1.0">
@@ -177,26 +160,13 @@ cat > "$ENT_TMP_APP_BASE" <<'PLIST'
177160</plist>
178161PLIST
179162180-cat > "$ENT_TMP_RUNTIME" <<'PLIST'
181-<?xml version="1.0" encoding="UTF-8"?>
182-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
183-<plist version="1.0">
184-<dict>
185- <key>com.apple.security.cs.allow-jit</key>
186- <true/>
187- <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
188- <true/>
189-</dict>
190-</plist>
191-PLIST
192-193163if [[ "$DISABLE_LIBRARY_VALIDATION" == "1" ]]; then
194- /usr/libexec/PlistBuddy -c "Add :com.apple.security.cs.disable-library-validation bool true" "$ENT_TMP_APP_BASE" >/dev/null 2>&1 || \
195- /usr/libexec/PlistBuddy -c "Set :com.apple.security.cs.disable-library-validation true" "$ENT_TMP_APP_BASE"
164+ /usr/libexec/PlistBuddy -c "Add :com.apple.security.cs.disable-library-validation bool true" "$ENT_TMP_APP" >/dev/null 2>&1 || \
165+ /usr/libexec/PlistBuddy -c "Set :com.apple.security.cs.disable-library-validation true" "$ENT_TMP_APP"
196166echo "Note: disable-library-validation entitlement enabled (DISABLE_LIBRARY_VALIDATION=1)."
197167fi
198168199-APP_ENTITLEMENTS="$ENT_TMP_APP_BASE"
169+APP_ENTITLEMENTS="$ENT_TMP_APP"
200170201171# clear extended attributes to avoid stale signatures
202172xattr -cr "$APP_BUNDLE" 2>/dev/null || true
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。