Is this to prevent your executable from loading plugins that are not signed
with your team ID?

Because, in this case, this would look like what the Hardened runtime does.

On Fri, Jan 6, 2023 at 9:29 PM Aandi Inston via Cocoa-dev <
cocoa-dev@lists.apple.com> wrote:

> Is there any API for doing the following activities related to code
> signing?
> - Check that the signature on the running codesigned executable is from the
> same company as the signature on a bundle?
> OR
> - Get the company from the codesigned running executable and
> - Get the company from a signature on a bundle
> (so we can check they are the same).
>
> I think this can be done calling and reading output from the codesign CLI,
> but an API seems tidier.
>
> Reference to detailed reading is fine!!
> Thanks in advance!
> _______________________________________________
>
> Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)
>
> Please do not post admin requests or moderator comments to the list.
> Contact the moderators at cocoa-dev-admins(at)lists.apple.com
>
> Help/Unsubscribe/Update your Subscription:
> https://lists.apple.com/mailman/options/cocoa-dev/dev.iceberg%40gmail.com
>
> This email sent to dev.iceb...@gmail.com
>


-- 
Packaging Resources - http://s.sudre.free.fr/Packaging.html
_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to