| #
e88c2718
|
| 10-Sep-2026 |
Jim Jagielski <jimjag@gmail.com> |
Fix macOS language-pack signing, load-path check and sysconfig data
The load-path check matched each dylib's own @_______ ID and so rejected
every signed build; it now looks only for the CPython sta
Fix macOS language-pack signing, load-path check and sysconfig data
The load-path check matched each dylib's own @_______ ID and so rejected
every signed build; it now looks only for the CPython staging prefix.
show more ...
|
| #
d8849243
|
| 10-Sep-2026 |
Jim Jagielski <jimjag@gmail.com> |
macOS: harden application and disk image signing
Make strict signature verification fail packaging, honor configured
keychains for all artifacts, and limit process entitlements to executable
code. R
macOS: harden application and disk image signing
Make strict signature verification fail packaging, honor configured
keychains for all artifacts, and limit process entitlements to executable
code. Reject unresolved build-time Mach-O load paths before signing.
Use safe argument handling for signing and disk image creation, make
language-pack wrappers valid application bundles, and prevent them from
invalidating signed installations.
Relocate bundled Python's install names, preserve its Darwin sysconfig
data, and update the Spotlight importer for the Contents/program layout.
show more ...
|