From c55459fa77564e2c19ec37b841e12655725a30ae Mon Sep 17 00:00:00 2001 From: Brijesh Vora Date: Fri, 6 Nov 2026 17:47:35 -0600 Subject: [PATCH] Remove allow-dyld-environment-variables from macOS entitlements (#37685) Nothing in the repo reads DYLD_* variables, so the entitlement only weakens Hardened Runtime for the signed app and its inherited helpers. allow-jit stays because the terminal-host Node helper requires it. Co-authored-by: Brijesh Vora Co-authored-by: Neil --- resources/build/entitlements.mac.plist | 2 -- 1 file changed, 2 deletions(-) diff --git a/resources/build/entitlements.mac.plist b/resources/build/entitlements.mac.plist index bd49a7a24e6..8255262a572 100644 --- a/resources/build/entitlements.mac.plist +++ b/resources/build/entitlements.mac.plist @@ -18,8 +18,6 @@ com.apple.security.personal-information.location - com.apple.security.cs.allow-dyld-environment-variables - com.apple.security.cs.allow-jit com.apple.security.cs.allow-unsigned-executable-memory