Try to fix #745 by signing QtWengineProcess with `com.apple.security.…

…cs.disable-executable-page-protection`

CMake/CodeSigning.cmake

@@ -14,6 +14,7 @@ This module defines functions to codesign, notarize and staple macOS files.
                          [IDENTIFIER <identifier>]
                          [PREFIX <prefix>]
                          [OPTIONS <options>...]
+                         [ENTITLEMENTS <entitlements_file>]
                          FILES <files>...
     )
 
@@ -46,6 +47,8 @@ This module defines functions to codesign, notarize and staple macOS files.
   ``PREFIX``
     What to pass to ``--prefix``. eg 'com.domain.MyApp.' with a **trailing dot**. Ignored if ``IDENTIFIER`` is passed
 
+  ``ENTITLEMENTS entitlements_file``
+    The entitlements xml file to use
 
 .. cmake:command:: notarize_files_macos
 
@@ -146,7 +149,7 @@ endfunction()
 function(codesign_files_macos)
   set(prefix "")
   set(valueLessKeywords FORCE VERBOSE DEEP)
-  set(singleValueKeywords SIGNING_IDENTITY IDENTIFIER PREFIX)
+  set(singleValueKeywords SIGNING_IDENTITY IDENTIFIER PREFIX ENTITLEMENTS)
   set(multiValueKeywords FILES OPTIONS)
   cmake_parse_arguments(
     PARSE_ARGV 0 # Start at one with NAME is the first param
@@ -205,6 +208,14 @@ function(codesign_files_macos)
     list(APPEND cmd "--prefix" "${_PREFIX}")
   endif()
 
+  if (_ENTITLEMENTS)
+    if (NOT EXISTS "${_ENTITLEMENTS}")
+      message(FATAL_ERROR "Can't sign with entitlements ${_ENTITLEMENTS}, no file exists at that path.")
+    endif ()
+
+    list(APPEND cmd "--entitlements" "${_ENTITLEMENTS}")
+  endif()
+
   foreach(path ${_FILES})
     print_cmd_if_verbose("${cmd};${path}" _VERBOSE)
 

CMake/QtWebEngineProcess.entitlements

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.disable-executable-page-protection</key>
+    <true/>
+</dict>
+</plist>

CMake/install_codesign_script_OpenStudioApp.cmake

@@ -299,6 +299,14 @@ codesign_files_macos(
   FORCE VERBOSE
 )
 
+codesign_files_macos(
+  FILES ${CMAKE_INSTALL_PREFIX}/OpenStudioApp.app/Contents/Frameworks/QtWebEngineCore.framework/QtWebEngineCore
+  SIGNING_IDENTITY ${CPACK_CODESIGNING_DEVELOPPER_ID_APPLICATION}
+  PREFIX "${CPACK_CODESIGNING_MACOS_IDENTIFIER}."
+  ENTITLEMENTS "${CMAKE_CURRENT_LIST_DIR}/QtWebEngineProcess.entitlements"
+  FORCE VERBOSE
+)
+
 # Clean up to avoid multiple passes (several components) appending to a pre-existing list
 unset(FILES_TO_SIGN)
 unset(_FULL_PATHS)