DevMate / DevMateKit

Development and Distribution Assistance Platform for Mac Developers
https://devmate.com
22 stars 3 forks source link

Reporter App has `get-task-allow` set to true in MAS framework #62

Open PaulTaykalo opened 5 years ago

PaulTaykalo commented 5 years ago
codesign -v -d --entitlements - '..Problem Reporter Sandboxed.app/Contents/MacOS/Problem Reporter Sandboxed'

Identifier=com.devmate.Problem-Reporter-Sandboxed
Format=app bundle with Mach-O thin (x86_64)
CodeDirectory v=20500 size=690 flags=0x10000(runtime) hashes=12+5 location=embedded
Signature size=4697
Signed Time=28 Dec 2018, 12:18:51
Info.plist entries=23
TeamIdentifier=2M6BY8QGR8
Runtime Version=10.14.0
Sealed Resources version=2 rules=13 files=0
Internal requirements count=1 size=232
��qq_<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>
    <key>com.apple.security.get-task-allow</key> .  <-------------
    <true/>
    <key>com.apple.security.inherit</key>
    <true/>
</dict>
</plist>

This allows to debugger to be attached to this app in Release Build, which shouldn't be allowed