I am running a release build on jenkins and I keep seeing this entitlement get added. I am not sure from where it pops up since this is not explicitly added by me.
Is there something my local xcode build that's enabling this?
How does "com.apple.security.get-task-allow" = 1; get added to the entitlements?
I am running a release build on jenkins
It’s hard to answer this without more information about your build process. However, if you’re using xcodebuild then it follows the same rules as Xcode, that is, if Code Siging Inject Base Entitlements (CODE_SIGN_INJECT_BASE_ENTITLEMENTS) is set the system adds the get-task-allow entitlement when it signs for development and not when it signs for distribution.
Note that this relates to the signing, not the build configuration (Debug vs Release). It’s viable, and in some cases useful, to cross those particularly streams. For example, you might have a crash that only shows up in your Release build and thus want to export a development-signed Release build so that you can attach with the debugger to investigate.
Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"