PadXcode-Daemon/PadXcodeDaemon.entitlements
2026-04-12 00:42:51 -07:00

32 lines
1.2 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<!-- Allows the daemon to accept incoming HTTP/WebSocket connections -->
<key>com.apple.security.network.server</key>
<true/>
<!-- Allows outbound calls (devicectl, sourcekit-lsp, Tailscale) -->
<key>com.apple.security.network.client</key>
<true/>
<!-- Allows reading and writing project files anywhere the user selects -->
<key>com.apple.security.files.user-selected.read-write</key>
<true/>
<!-- Allows running child processes (xcodebuild, xcrun, zsh) -->
<key>com.apple.security.temporary-exception.mach-lookup.global-name</key>
<array>
<string>com.apple.dt.Xcode.PropertyListService</string>
</array>
<!-- Hardened runtime: allow unsigned executable memory (needed by some Vapor deps) -->
<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
<false/>
<!-- Hardened runtime: allow DYLD env variables (needed for some SPM builds) -->
<key>com.apple.security.cs.allow-dyld-environment-variables</key>
<false/>
</dict>
</plist>