gecko-dev/security
Haik Aftandilian 73b7f5c089 Bug 1543830 - Add Mac Hardened Runtime entitlement files to the tree r=spohl
Add entitlement files for Hardened Runtime configuration to be used by Release Engineering for official builds and try builds and developers for local builds. These entitlement files are input to the codesign command.

Hardened Runtime and codesigning is not yet enabled for local builds or try builds so for now these files will only be used by Release Engineering.

production.entitlements.xml is intended to be used for official channel builds that will be codesigned, notarized, and shipped to users.

developer.entitlements.xml is intended to be used for developer and try builds that will be codesigned, but not notarized or shipped to users. The developer file enables debugging which is not compatible with notarization, but is otherwise the same as the production file.

codesign.bash is a stop-gap script to allow developers who setup Apple Developer ID certificates to codesign Nightly themselves and enabled Hardened Runtime.

Differential Revision: https://phabricator.services.mozilla.com/D27396

--HG--
extra : moz-landing-system : lando
2019-04-18 15:56:00 +00:00
..
apps bug 1525343 - increase add-on manifest size limit r=Alex_Gaynor 2019-02-12 22:01:16 +00:00
certverifier bug 1529044 - use a low-priority queue on a certificate verification thread to import intermediate certificates r=mgoodwin 2019-04-10 21:44:16 +00:00
ct bug 1515608 - allow end-entity certificates to be trust anchors for compatibility r=jcj 2019-03-18 20:01:02 +00:00
mac/hardenedruntime Bug 1543830 - Add Mac Hardened Runtime entitlement files to the tree r=spohl 2019-04-18 15:56:00 +00:00
manager No Bug, mozilla-central repo-update HSTS HPKP blocklist remote-settings - a=repo-update r=RyanVM 2019-04-18 13:07:37 +00:00
nss Bug 1539227 - land NSS e5e10a46b9ad UPGRADE_NSS_RELEASE, r=me 2019-04-02 20:29:18 +00:00
sandbox Bug 1543790 - Fix RDD sandboxing conditions so the parent and child processes agree. r=gcp 2019-04-16 13:53:20 +00:00
.eslintrc.js Bug 1246594 - Enable ESLint rule no-throw-literal by default. r=Standard8 2019-03-19 22:02:42 +00:00
generate_certdata.py Bug 1464869 - Run autopep8 on security/ r=fkiefer 2018-05-26 06:47:27 -07:00
generate_mapfile.py Bug 1489443 - Set GCC_USE_GNU_LD based on linker kind. r=froydnj 2018-10-17 19:46:03 +00:00
moz.build Bug 1535226 - Remove uses of XP_WIN32 in Gecko. r=glandium 2019-03-21 01:28:50 +00:00
nss.symbols Bug 1529227, Don't export NSS CMS functions not required by Firefox, r=keeler 2019-02-28 10:21:31 +01:00