Mac binary signing tweaks

[palerdot]

Problem:

Mac app signing with binaries (like 7zip) fails. Related to #7934

Solution

Tweaking mac plist configuration to allow mac signing to include external binaries.

  <dict>
    <!-- This option is missing in ./build-mac/entitlements.mac.inherit.plist -->
    <key>com.apple.security.cs.disable-library-validation</key>
    <true/>
  </dict>

and in mac configuration for electron-builder

{
  "gatekeeperAssess": false,
}

Reference:

• Executables within app.asar.unpacked are not being signed correctly in OSX 10.14.5 electron-userland/electron-builder#3940
• https://www.funtoimagine.com/blog/electron-mac-sign-and-notarize/

Some other related links that solved the same problem by including com.apple.security.cs.disable-library-validation

• https://kilianvalkhof.com/2019/electron/notarizing-your-electron-application/
• https://til.simonwillison.net/electron/sign-notarize-electron-macos
• how to disable-library-validation electron-userland/electron-builder#5427
• https://stackoverflow.com/a/65024719/1410291
• https://stackoverflow.com/a/68176513/1410291

[laurent22]

Hmm, I'm not sure this will work. If we disable security checks it's likely something's not going to go smoothly, but let's try anyway