From c3c13daa06a9abc2a79b16790b2988eaa800759a Mon Sep 17 00:00:00 2001
From: Martin Lippert <mlippert@pivotal.io>
Date: Fri, 1 Nov 2019 14:18:51 +0100
Subject: [PATCH] add macos entitlements for signing, in prep for notarization

---
 .../entitlements.plist                         | 18 ++++++++++++++++++
 .../pom.xml                                    |  2 ++
 2 files changed, 20 insertions(+)
 create mode 100644 eclipse-distribution/org.springframework.boot.ide.product.e413/entitlements.plist

diff --git a/eclipse-distribution/org.springframework.boot.ide.product.e413/entitlements.plist b/eclipse-distribution/org.springframework.boot.ide.product.e413/entitlements.plist
new file mode 100644
index 000000000..5b0a42361
--- /dev/null
+++ b/eclipse-distribution/org.springframework.boot.ide.product.e413/entitlements.plist
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <key>com.apple.security.cs.disable-executable-page-protection</key>
+    <true/>
+    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
+    <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+    <key>com.apple.security.cs.debugger</key>
+    <true/>
+</dict>
+</plist>
diff --git a/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml b/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml
index 183f36ef3..8f5e64741 100644
--- a/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml
+++ b/eclipse-distribution/org.springframework.boot.ide.product.e413/pom.xml
@@ -191,6 +191,8 @@
 
 								<exec executable="codesign" failonerror="true">
 									<arg value="--verbose"/>
+									<arg value="--entitlements"/>
+									<arg value="${project.build.directory}/../entitlements.plist"/>
 								    <arg value="--keychain"/>
 								    <arg value="${env.KEYCHAIN}"/>
 								    <arg value="-s"/>