summaryrefslogtreecommitdiff
path: root/omnibus/resources
diff options
context:
space:
mode:
authorJon Morrow <jmorrow@chef.io>2020-02-01 13:29:08 -0800
committerJon Morrow <jmorrow@chef.io>2020-02-01 13:29:08 -0800
commitf2eed815bb3b99399fc5ce5620d2bd19daa473d8 (patch)
treea52cf9835bd4abab7bb03f7f26959e0869d86fae /omnibus/resources
parent3023717497cb5540190c1977d578599437325330 (diff)
downloadchef-f2eed815bb3b99399fc5ce5620d2bd19daa473d8.tar.gz
Adding entitlement for unsigned memory executionjm/add_unsigned_memory_entilement
ffi loads c code into memory in an unsigned way and this allows workstation to work with the hardened runtime. Signed-off-by: Jon Morrow <jmorrow@chef.io>
Diffstat (limited to 'omnibus/resources')
-rw-r--r--omnibus/resources/chef/pkg/entitlements.plist8
1 files changed, 8 insertions, 0 deletions
diff --git a/omnibus/resources/chef/pkg/entitlements.plist b/omnibus/resources/chef/pkg/entitlements.plist
new file mode 100644
index 0000000000..bb87459e76
--- /dev/null
+++ b/omnibus/resources/chef/pkg/entitlements.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+ <dict>
+ <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+ <true/>
+ </dict>
+</plist> \ No newline at end of file