Re: GNTPClientService sandboxing

[Rudy Richter]

certainly sounds like it to me, you have to make sure that when you resign the xpc service that either the entielements are being explicitly included or you call codesign with --preserve-metadata=identifier,entitlements,resource-rules,requirements otherwise the part of the binary that says its sandboxed will be stripped off. additionally this is not the right mailing list for questions like this. you want "growl development" https://groups.google.com/forum/?fromgroups#!forum/growl-development

-rudy

On Sunday, October 28, 2012 4:37:08 AM UTC-4, Anakin Zheng wrote:

Hi all,

Puzzled by a problem I met these days.

I run the xpc-rename-move.rb after compile, and said "Code resign valid"

But when I submit it to MAS, the system told me:

Dear developer,

We have discovered one or more issues with your recent delivery for "diumoo". To process your delivery, the following issues must be corrected:

App sandbox not enabled - The following executables must include the "com.apple.security.app-sandbox" entitlement with a Boolean value of true in the entitlements property list. Refer to the App Sandbox page for more information on sandboxing your app.

• diumoo.app/Contents/XPCServices/com.diumoo.diumoo.GNTPClientService.xpc/Contents/MacOS/com.diumoo.diumoo.GNTPClientService

Once these issues have been corrected, go to the Version Details page and click "Ready to Upload Binary." Continue through the submission process until the app status is "Waiting for Upload." You can then deliver the corrected binary.

Regards,

The App Store team

Is there anything wrong with the codesign?

Thanks & Best regards

Anakin

[Anakin Zheng]

Thanks rudy,

After called codesign with --preserve-metadata=identifier,entitlements,resource-rules,requirements, the problem is still there.

I'll post this again in growl development.

Anakin