From d5d2e4e584737d05d004ce9dd4f2aca0a0dfaa92 Mon Sep 17 00:00:00 2001
From: Max Fierke <max@maxfierke.com>
Date: Mon, 15 Apr 2024 20:49:05 -0500
Subject: [PATCH] macOS: Add missing entitlements for PCRE2 JIT

---
 .github/workflows/release.yml | 6 ++++++
 Makefile                      | 1 +
 macos-entitlements.plist      | 8 ++++++++
 3 files changed, 15 insertions(+)
 create mode 100644 macos-entitlements.plist

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 553965a..485c20b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -115,6 +115,9 @@ jobs:
     - name: Build signed & notorized release bundle
       run: make release RELEASE=1 STATIC=1
 
+    - name: Smoke test the codesigned release
+      run: bin/mstrap --help
+
     - name: Upload release bundle artifact
       uses: actions/upload-artifact@v3
       with:
@@ -154,6 +157,9 @@ jobs:
     - name: Build signed & notorized release bundle
       run: make release RELEASE=1 STATIC=1 TARGET_ARCH=arm64
 
+    - name: Smoke test the codesigned release
+      run: bin/mstrap --help
+
     - name: Upload release bundle artifact
       uses: actions/upload-artifact@v3
       with:
diff --git a/Makefile b/Makefile
index 82293f2..132d6ea 100644
--- a/Makefile
+++ b/Makefile
@@ -113,6 +113,7 @@ codesign: bin/mstrap
 		codesign -f -v \
 			--timestamp \
 			--options runtime \
+			--entitlements "macos-entitlements.plist" \
 			-s "$(CODESIGN_IDENTITY)" \
 			bin/mstrap; \
 	fi
diff --git a/macos-entitlements.plist b/macos-entitlements.plist
new file mode 100644
index 0000000..4efe1ce
--- /dev/null
+++ b/macos-entitlements.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+</dict>
+</plist>