How to enable get-task-allow entitlement? Is it need to be enabled in signing certificate or can we enable it from Xcode?

How to enable get-task-allow entitlement? Is it need to be enabled in signing certificate or can we enable it from Xcode?

get-task-allow
is typically added by Xcode automatically for development builds. You can disable this default behaviour via Code Signing Inject Base Entitlements (
CODE_SIGN_INJECT_BASE_ENTITLEMENTS
) build setting.

Keep in mind that, like most entitlements,

get-task-allow
must be whitelisted by your provisioning profile, and only Development profiles have it so whitelisted.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Hi,

How to make this setting in XCode 9?


Regards

PK

I had a look at Xcode 9.4 and it seems to support Code Signing Inject Base Entitlements just like Xcode 10.

Share and Enjoy

Quinn “The Eskimo!”
Apple Developer Relations, Developer Technical Support, Core OS/Hardware

let myEmail = "eskimo" + "1" + "@apple.com"

Hi,

This can be acheived from the codesign command as well.

sudo codesign --sign "xxxx" -f --timestamp --options=runtime --entitlements /Users/admin/Desktop/ent.plist <path to app>


The /Users/admin/Desktop/ent.plist file contains

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>com.apple.security.get-task-allow</key>

<false/>

</dict>

</plist>

Hope this helps.

[quote='366493022, DTS Engineer, /thread/118415?answerId=366493022#366493022']

+ ```

[/quote]


How to enable get-task-allow entitlement? Is it need to be enabled in signing certificate or can we enable it from Xcode?
 
 
Q