From 0232d20b2bbef9bf475dcb3cb617c0a6230c0bef Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Christian=20Hohnst=C3=A4dt?= <christian@hohnstaedt.de>
Date: Thu, 6 May 2021 21:47:53 +0200
Subject: [PATCH] Forced sandbox only for the Appstore app

---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 4bc601f1..a1c2a694 100644
--- a/Makefile
+++ b/Makefile
@@ -203,7 +203,7 @@ xca.app: xca$(SUFFIX) $(INSTSTAMP)
 
 xca.dmg: $(MACTARGET).dmg
 
-CODESIGN=codesign --deep --signature-size=96000 --options=runtime --timestamp  --entitlements $(TOPDIR)/misc/entitlement.plist
+CODESIGN=codesign --deep --signature-size=96000 --options=runtime --timestamp
 
 $(MACTARGET).dmg: $(DMGSTAGE)
 	@$(PRINT) "  DMG    $@"
@@ -228,7 +228,7 @@ $(MACTARGET).pkg: xca.app xca.app.dSYM
 	mkdir -p $(APPSTORE_DIR)/dSYM
 	cp -a $^ $(APPSTORE_DIR)
 	$(MACDEPLOYQT) $(APPSTORE_DIR)/xca.app -appstore-compliant
-	$(CODESIGN) -s "$(APPLE_CERT_3PARTY_APP)" $(APPSTORE_DIR)/xca.app
+	$(CODESIGN) -s "$(APPLE_CERT_3PARTY_APP)" --entitlements $(TOPDIR)/misc/entitlement.plist $(APPSTORE_DIR)/xca.app
 	# Having the xca.app.dSYM around is apparently not sufficient
 	symbols -noTextInSOD -noDaemon -arch all \
 		-symbolsPackageDir $(APPSTORE_DIR)/dSYM \