Skip to content

`make list_toolchain_updates-firefox-macos` could check if the macos entitilments files we use for signing have changed

The entitlements files we use for signing Tor and Mullvad browsers are stored in tor-browser-build.git/tools/signing/macos-entitlements, and have been copied from tor-browser.git/security/mac/hardenedruntime/production.

The list of files being signed by each entitlements files is stored in tor-browser.git/taskcluster/config.yml, in mac-signing. While we do that in tor-browser-build.git/tools/signing/wrappers/sign-rcodesign-128.

The make list_toolchain_updates-firefox-macos command could check if the entitlements files and the list of files being signed by each one has been changed upstream.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information