Add entitlements support

[wagoodman]

What would you like to be added:
Support the same ability as cosign --entitlements <xml-file> where the input would be an XML Plist which entitlements the app needs to run.

[gedw99]

Dumb question. Is this for example to access the camera or microphone?

[spiffcs]

Yep!

For more information on entitlements see:
https://developer.apple.com/documentation/bundleresources/entitlements

For the documentation on formatting them and common notarization issues see:
https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3561456

[gedw99]

Thanks @spiffcs

wil try this out and try to extend to support entitlements

[gedw99]

So depending on what’s in the entitlements some extra signing needs to occur ? Sorry I am not that family with Mac and signing .

i have a .app with entitlement plist to a access things like camera and mic .

thanks in advance .

[cfergeau]

To avoid duplicated work/efforts, I've started adding entitlement support in https://github.com/cfergeau/quill/tree/entitlements
This is working well enough for codesign -d --entitlements to be able to parse and display the entitlements - but they are currently hardcoded.