fix: configure sandbox for Sparkle installer with proper entitlements

- Add downloads folder read-write access for installer
- Enable SUEnableInstallerLauncherService for sandboxed update installation
- Keep XPC service entitlements for installer communication
This commit is contained in:
Micha
2025-12-30 20:04:26 +01:00
parent 5644fbdfe0
commit 615d664731
2 changed files with 3 additions and 1 deletions

View File

@@ -7,6 +7,6 @@
<key>SUPublicEDKey</key> <key>SUPublicEDKey</key>
<string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string> <string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string>
<key>SUEnableInstallerLauncherService</key> <key>SUEnableInstallerLauncherService</key>
<false/> <true/>
</dict> </dict>
</plist> </plist>

View File

@@ -6,6 +6,8 @@
<true/> <true/>
<key>com.apple.security.network.client</key> <key>com.apple.security.network.client</key>
<true/> <true/>
<key>com.apple.security.files.downloads.read-write</key>
<true/>
<key>com.apple.security.xpc.aConnectionServices</key> <key>com.apple.security.xpc.aConnectionServices</key>
<array> <array>
<string>com.sparkle-project.InstallerConnection</string> <string>com.sparkle-project.InstallerConnection</string>