Timeline for How do I find out what entitlements an app has?
Current License: CC BY-SA 4.0
16 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 6 at 9:44 | comment | added | ogrisel | I realized that I used a codesign command from a conda env instead of the one from the system at: /usr/bin/codesign. The one from the system does have a working "-d" / "--display" flag. | |
| Aug 6 at 9:42 | comment | added | ogrisel | I get "--sign is required" when running the above command on an up to date macOS Sonoma 14.5. I furthermore do no see any reference to the "-d" flag in the output of "codesign --help". | |
| Mar 25, 2023 at 13:57 | comment | added | ReinstateMonica3167040 |
@VioletGiraffe There's now a --xml switch which is much clearer than the colon, which is now deprecated.
|
|
| S Mar 25, 2023 at 13:52 | history | suggested | ReinstateMonica3167040 | CC BY-SA 4.0 |
replace deprecated colon with xml argument
|
| Mar 25, 2023 at 10:24 | review | Suggested edits | |||
| S Mar 25, 2023 at 13:52 | |||||
| Sep 30, 2020 at 7:01 | comment | added | Motti Shneor | I try to see where can an App write files on disk (let's say Safari.app). The entitlements are quite thick and complicated, and I couldn't see where is the app "Sandbox" defined, and its scope on disk. A hint please? | |
| Feb 19, 2020 at 15:48 | comment | added | Violet Giraffe |
The :- part was the key to making this work (that man fails to mention), whatever it means.
|
|
| Feb 17, 2020 at 10:41 | comment | added | rustyMagnet |
I used jtool --ent /MyApp.app/Contents/MacOS/MyApp @Ken
|
|
| S Jul 1, 2019 at 15:48 | history | suggested | artyom.stv | CC BY-SA 4.0 |
Omit extra bytes before `<?xml`
|
| Jul 1, 2019 at 14:46 | review | Suggested edits | |||
| S Jul 1, 2019 at 15:48 | |||||
| Jul 1, 2019 at 14:32 | comment | added | artyom.stv |
Add a colon to omit those bytes: codesign -d --entitlements :- /Applications/Whatever.app/
|
|
| May 18, 2019 at 6:29 | comment | added | JayB |
codesign -d --entitlements - <filepath> 2>&1 | LANG=C LC_CTYPE=C sed 's/^.*\<\?xml/\<\?xml/g' | grep "<.*>" Maybe there's another solution, but that's how I strip those bytes. But I don't think it's necessary: you can codesign an app by pointing to an entitlements xml, and macOS will ignore those bytes anyway.
|
|
| Apr 22, 2019 at 15:03 | comment | added | luckman212 |
On Mojave 10.14.4, the command above prints an extra 8 bytes at the start: fade7171000000fb, making the XML invalid. Any way to avoid that or strip it away?
|
|
| May 15, 2018 at 9:42 | comment | added | user202579 | Also more documentation about that: developer.apple.com/library/content/documentation/Security/… | |
| Jun 17, 2012 at 0:57 | vote | accept | Ken | ||
| Jun 2, 2012 at 2:27 | history | answered | Ken | CC BY-SA 3.0 |