As I mentioned above, I’m a big fan of using GUI apps to explore installer packages. However, I think this is a case where it makes sense to use the command-line tools rather than an app, because that gives you a more direct view of what’s going on. I created a new test project, add a restricted entitlement to it, and then exported an App Store Connect installer package. This is what I see: % xar -xf Test788895.pkg % lsbom com.example.apple-samplecode.Test788895.pkg/Bom . 0 0/0 ./Test788895.app 40755 0/0 ./Test788895.app/Contents 40755 0/0 ./Test788895.app/Contents/Info.plist 100644 0/0 1582 981317462 ./Test788895.app/Contents/MacOS 40755 0/0 ./Test788895.app/Contents/MacOS/Test788895 100755 0/0 202608 1379559329 ./Test788895.app/Contents/PkgInfo 100644 0/0 8 742937289 ./Test788895.app/Contents/Resources 40755 0/0 ./Test788895.app/Contents/Resources/MainMenu.nib 100644 0/0 14262 622228364 ./Test788895.app/Contents/_CodeSignature 40755 0/0 ./Test788895.app/Contents/_CodeSignature/CodeResources 100644
Topic:
Code Signing
SubTopic:
General
Tags: