From e8fad3399bdda1feef2bf4687c9ef5adc6323108 Mon Sep 17 00:00:00 2001
From: Caesar Woo <caesar.wu@outlook.com>
Date: Wed, 20 Mar 2024 06:50:27 +0100
Subject: [PATCH] feat: enable App Sandbox on macOS builds

This commit enables the App Sandbox feature, as well as explicitly enabling the following entitlements
* USB device access (for hardware keys)
* User selected file access (r/w)
* Network client (for HIBP and icon download)
* Application groups (for IPC with keepassxc-proxy)

This commit is a WIP, so expect bugs.
---
 share/macosx/keepassxc.entitlements | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/share/macosx/keepassxc.entitlements b/share/macosx/keepassxc.entitlements
index 7126b7ac5..67cd39d72 100644
--- a/share/macosx/keepassxc.entitlements
+++ b/share/macosx/keepassxc.entitlements
@@ -8,5 +8,17 @@
 	<array>
 		<string>G2S7P7J672.org.keepassxc.keepassxc</string>
 	</array>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.device.usb</key>
+	<true/>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.application-groups</key>
+	<array>
+		<string>G2S7P7J672.org.keepassxc.keepassxc</string>
+	</array>
 </dict>
 </plist>