anne/lyx_mirror
1
0
Fork 0
mirror of https://git.lyx.org/repos/lyx.git synced 2024-11-25 10:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Make the directories in LyX application bundle read only.

Browse Source 
Python produces files with cached on-the-fly compiled code on disk inside the bundle.
This should be avoided in case of a signed application bundle.

(cherry picked from commit ca7defab45)
This commit is contained in:
Stephan Witt 2020-02-21 18:04:28 +01:00
parent 07e3f92b62
commit 56004e6d3a
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
development/LyX-Mac-binary-release.sh
View File

@ -633,7 +633,10 @@ LYX_BUNDLE_PATH="${LyxAppPrefix}/${BUNDLE_PATH}"
build_lyx() {
# Clear Output
if [ -n "${LyxAppZip}" -a -f "${LyxAppZip}" ]; then rm "${LyxAppZip}"; fi
if [ -d "${LyxAppPrefix}" ]; then rm -rf "${LyxAppPrefix}"; fi
if [ -d "${LyxAppPrefix}" ]; then
find "${LyxAppPrefix}" -type d -exec chmod u+w '{}' \;
rm -rf "${LyxAppPrefix}"
fi
case "${EnableCXX11}" in
"--enable-cxx11")
@ -1013,7 +1016,7 @@ make_dmg() {
VOLUME=$(mount |grep ${DEVICE} | cut -f 3 -d ' ')
# copy in the application bundle
ditto --hfsCompression "${LyxAppDir}.app" "${VOLUME}/${LyxName}.app"
ditto --hfsCompression "${LyxAppPrefix}" "${VOLUME}/${LyxName}.app"
# copy in background image
mkdir -p "${VOLUME}/Pictures"
@ -1067,5 +1070,6 @@ if [ ${LyxOnlyPackage:-"no"} = "no" ]; then
convert_universal
copy_dictionaries
test -n "${CODESIGN_IDENTITY}" && code_sign "${LYX_BUNDLE_PATH}"
find "${LyxAppPrefix}" -type d -exec chmod a-w '{}' \;
fi
build_package