gecko-dev/security
Haik Aftandilian 757b208866 Bug 1593071 - [macOS] Land different entitlement files for parent and child processes r=spohl
Add separate entitlement files for the browser (aka parent process) and plugin-container processes. Leave the old production and developer entitlement files in place.

Once automation has been updated to use the new process-specific entitlement files (bug 1593072), the older entitlement files can be removed.

Future work will change the process-specific entitlements to be minimized for each process type.

Update codesign.bash to
  1) use the separate browser and plugin-container entitlement files
  2) only sign executables with entitlements, not sign unnecessary files
  3) output to a .dmg instead of a .zip file.

Differential Revision: https://phabricator.services.mozilla.com/D52117

--HG--
extra : moz-landing-system : lando
2019-11-07 13:26:05 +00:00
..
apps Bug 1586358 - Replace existing instances of GENERATED_FILES with references to the GeneratedFile template r=firefox-build-system-reviewers,mshal 2019-10-07 21:15:19 +00:00
certverifier Bug 1592355 - Convert certList to raw array for Pins verification r=keeler 2019-10-31 23:56:32 +00:00
ct
mac/hardenedruntime Bug 1593071 - [macOS] Land different entitlement files for parent and child processes r=spohl 2019-11-07 13:26:05 +00:00
manager Backed out changeset 90745d442c4b for causing build bustages CLOSED TREE 2019-11-07 18:19:01 +02:00
nss Backed out changeset 1adbdd45d961 (bug 1592007) for bc failures on browser_masterPassword.js UPGRADE_NSS_RELEASE. CLOSED TREE 2019-11-06 03:16:30 +02:00
sandbox Bug 1591117 - Report ENOSYS on statx, but allow membarrier. r=jld 2019-11-07 09:21:51 +00:00
.eslintrc.js Bug 1558517 - Pre 3.0: Remove conflicting eslint rules, and turn on "curly: all" everywhere, r=standard8 2019-06-28 17:14:01 +02:00
generate_certdata.py
generate_mapfile.py
moz.build
nss.symbols bug 1573542 - be more efficient about finding client certificates r=jcj,kjacobs 2019-09-18 23:28:05 +00:00