fix: configure sandbox for Sparkle installer with proper entitlements
- Add downloads folder read-write access for installer - Enable SUEnableInstallerLauncherService for sandboxed update installation - Keep XPC service entitlements for installer communication
This commit is contained in:
@@ -7,6 +7,6 @@
|
|||||||
<key>SUPublicEDKey</key>
|
<key>SUPublicEDKey</key>
|
||||||
<string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string>
|
<string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string>
|
||||||
<key>SUEnableInstallerLauncherService</key>
|
<key>SUEnableInstallerLauncherService</key>
|
||||||
<false/>
|
<true/>
|
||||||
</dict>
|
</dict>
|
||||||
</plist>
|
</plist>
|
||||||
|
|||||||
@@ -6,6 +6,8 @@
|
|||||||
<true/>
|
<true/>
|
||||||
<key>com.apple.security.network.client</key>
|
<key>com.apple.security.network.client</key>
|
||||||
<true/>
|
<true/>
|
||||||
|
<key>com.apple.security.files.downloads.read-write</key>
|
||||||
|
<true/>
|
||||||
<key>com.apple.security.xpc.aConnectionServices</key>
|
<key>com.apple.security.xpc.aConnectionServices</key>
|
||||||
<array>
|
<array>
|
||||||
<string>com.sparkle-project.InstallerConnection</string>
|
<string>com.sparkle-project.InstallerConnection</string>
|
||||||
|
|||||||
Reference in New Issue
Block a user