Generate a Provisioning Profile with Entitlement 'get-allow-tasks' to 'false'

Question

Created Sep ’20

Replies 2

Boosts 0

Views 1.5k

Participants 3

Hi I'm looking to generate a Provisioning Profile with Entitlement 'get-allow-tasks' equals 'false', but even when I use a Certificate of type "Distribution" and Provisioning Profile of type "AppStore", the value of 'get-allow-tasks' is 'true'. My understanding is that that Certificate/Provisioning Profile combination should yield 'get-allow-tasks' equals 'false'.

How do I generate a Provisioning Profile for Distribution with 'get-allow-tasks' equals 'false'?

Note that even if I try to overwrite the value in my Entitlements.plist I see an error that the values are conflicting.

Boost

Answer 1

gmorimoto OP

Sep ’20

From https://developer.apple.com/documentation/xcode/notarizing_macos_software_before_distribution/resolving_common_notarization_issues

To avoid receiving this error message, archive (as of Xcode 10.2) or export your app directly from Xcode, or set the CODESIGNINJECTBASEENTITLEMENTS build setting to NO before building your app for distribution. But only change the build setting when you’re done debugging and ready to distribute, because doing so makes it impossible to debug the binary on a system that uses System Integrity Protection.

0

Answer 2

DTS Engineer OP

Apple

Sep ’20

The entitlements in your profile are not entitlements per se, but rather the authority to use an entitlement; they are an entitlement allowlist. The actual entitlements used by your app are those baked into its code signature.

In the case of get-task-allow, you never need a false value because the default is false. So, you have two options:

Sign with get-task-allow set to true
Sign without get-task-allow

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"

0