Download this file
| 1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
| 3 | <plist version="1.0"> |
| 4 | <dict> |
| 5 | <!-- CAPTURE-KIT DEMO entitlements. Deliberately MINIMAL so this build has |
| 6 | its own EMPTY keychain and shows ONLY the seeded demo space — it can |
| 7 | never read Paul's real signed-in spaces. Compared to LChatMac.entitlements |
| 8 | these are dropped ON PURPOSE: |
| 9 | - keychain-access-groups (…messenger.shared) — the reason a normal |
| 10 | build reads the real account; removing it isolates this build's keychain. |
| 11 | - com.apple.security.application-groups (group.com.elevenmessenger.messenger) |
| 12 | — the shared avatar cache + MessageStore index container; not needed |
| 13 | for a throwaway screenshot build. |
| 14 | - com.apple.developer.usernotifications.communication — no push here. |
| 15 | - the Sparkle -spks/-spki mach-lookup exceptions — no auto-update here. |
| 16 | What remains is the minimum that signs cleanly under automatic signing |
| 17 | (team J5NDF5PCD8) for a sandboxed Mac app that loads a web instance and |
| 18 | lets you pick/save files. --> |
| 19 | <key>com.apple.security.app-sandbox</key> |
| 20 | <true/> |
| 21 | <key>com.apple.security.network.client</key> |
| 22 | <true/> |
| 23 | <key>com.apple.security.files.user-selected.read-write</key> |
| 24 | <true/> |
| 25 | </dict> |
| 26 | </plist> |
| 27 | |
amadan