From a02726aad737c270c5511226ddcef02cb8a996fa Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kyle.spearrin@gmail.com>
Date: Tue, 8 Oct 2019 13:59:23 -0400
Subject: [PATCH] hardened runtime for mas builds

---
 package.json                     | 4 +---
 resources/entitlements.mas.plist | 4 ++++
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index ff300aa152..14e44c17bc 100644
--- a/package.json
+++ b/package.json
@@ -150,9 +150,7 @@
     },
     "mas": {
       "entitlements": "resources/entitlements.mas.plist",
-      "entitlementsInherit": "resources/entitlements.mas.inherit.plist",
-      "hardenedRuntime": false,
-      "asarUnpack": "*.node"
+      "entitlementsInherit": "resources/entitlements.mas.inherit.plist"
     },
     "nsisWeb": {
       "oneClick": false,
diff --git a/resources/entitlements.mas.plist b/resources/entitlements.mas.plist
index 38da9a9768..2b46e8ff8e 100644
--- a/resources/entitlements.mas.plist
+++ b/resources/entitlements.mas.plist
@@ -8,5 +8,9 @@
 	<true/>
 	<key>com.apple.security.files.user-selected.read-write</key>
 	<true/>
+	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+	<true/>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
 </dict>
 </plist>