Probably codesign.sh should exit with a non-zero exit code if spctl fails.<div><br></div><div>  Filipe<br><br>On Tuesday, 3 November 2015, Rob Jonson <<a href="mailto:rob@hobbyistsoftware.com">rob@hobbyistsoftware.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Adds a test with spctl as described here:</div><div><a href="https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-DontLinkElementID5" target="_blank">https://developer.apple.com/library/mac/documentation/Security/Conceptual/CodeSigningGuide/Procedures/Procedures.html#//apple_ref/doc/uid/TP40005929-CH4-DontLinkElementID5</a></div><div>---</div><div> extras/package/macosx/codesign.sh | 2 ++</div><div> 1 file changed, 2 insertions(+)</div><div><br></div><div>diff --git a/extras/package/macosx/codesign.sh b/extras/package/macosx/codesign.sh</div><div>index 74a9c9d..451d3dc 100755</div><div>--- a/extras/package/macosx/codesign.sh</div><div>+++ b/extras/package/macosx/codesign.sh</div><div>@@ -194,5 +194,7 @@ codesign --verify -vv VLC.app/Contents/Frameworks/Sparkle.framework/Versions/Cur</div><div> info "Validating complete bundle"</div><div> codesign --verify --deep --verbose=4 VLC.app</div><div> </div><div>+info "Testing with spctl (all assessments should be true)"</div><div>+spctl --assess --verbose=4 --raw --type execute VLC.app</div><div> </div><div> info "Validation complete"</div><div>-- </div><div>2.4.9 (Apple Git-60)</div><div><br></div><div><br></div>
</div>
</blockquote></div>