feat: codesign and add entitlements for buddled gnupg binaries

26 files changed, 63 insertions, 49 deletions

diff --git a/GpgFrontend.entitlements b/GpgFrontend.entitlements
new file mode 100644
index 00000000..637aa6f1
--- /dev/null
+++ b/GpgFrontend.entitlements
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.print</key>
+	<true/>
+</dict>
+</plist>
diff --git a/resource/lfs/macOS/GnuPG/agent/gpg-agent b/resource/lfs/macOS/GnuPG/agent/gpg-agent
index da3da619..190c40e2 100755
--- a/resource/lfs/macOS/GnuPG/agent/gpg-agent
+++ b/resource/lfs/macOS/GnuPG/agent/gpg-agent
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:67d6e0b4bffcba94b8705dc44bc79dac0858502c038d44b76343afbc516e5fb5
-size 435856
+oid sha256:09ad99b28e3b2db960965f7debf20d5d64867cebc6852d52a853f827dad7c7b5
+size 436544
diff --git a/resource/lfs/macOS/GnuPG/bin/gpgconf-original b/resource/lfs/macOS/GnuPG/bin/gpgconf-original
index 490a90e5..e305b949 100755
--- a/resource/lfs/macOS/GnuPG/bin/gpgconf-original
+++ b/resource/lfs/macOS/GnuPG/bin/gpgconf-original
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:5a7f6c17948891ae7334b94872cd6be3e1fcfe9129a5f3c59b2de253e9da648a
-size 200864
+oid sha256:453e1ff371d08aee36b84899582ba68bc275ba8883340ea183f0c82a51bf480c
+size 201552
diff --git a/resource/lfs/macOS/GnuPG/dirmngr/dirmngr b/resource/lfs/macOS/GnuPG/dirmngr/dirmngr
index 0eafd94b..944a545a 100755
--- a/resource/lfs/macOS/GnuPG/dirmngr/dirmngr
+++ b/resource/lfs/macOS/GnuPG/dirmngr/dirmngr
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:7cc8ea44327a136d87f4b0dfbcd5e5b83c35a708946c6fd4aa8b2a902385f56e
-size 580800
+oid sha256:80903d1d7107d87f350790a01fb19a6206cc36d62d50d82865e1ef9c081d443b
+size 581472
diff --git a/resource/lfs/macOS/GnuPG/g10/gpg b/resource/lfs/macOS/GnuPG/g10/gpg
index 4809c781..92f49d92 100755
--- a/resource/lfs/macOS/GnuPG/g10/gpg
+++ b/resource/lfs/macOS/GnuPG/g10/gpg
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:6e4b1d91701d4be4d4b0463cc0631516779b19857d4203d392b20c520309f7ca
-size 1033008
+oid sha256:d8973db4e183b7b26aed45fc663ff34e2d0ba52b0d3d08bc249294d89a955cf1
+size 1033696
diff --git a/resource/lfs/macOS/GnuPG/kbx/keyboxd b/resource/lfs/macOS/GnuPG/kbx/keyboxd
index 1975f726..e3675190 100755
--- a/resource/lfs/macOS/GnuPG/kbx/keyboxd
+++ b/resource/lfs/macOS/GnuPG/kbx/keyboxd
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:31ae9644f9d6b63c95fe6549eeb071a72094e03837e8c95095189941b0f30ed0
-size 304816
+oid sha256:c66166e8e8efef62e18c67cd2bac0db5d0ba50e6c0eb117fc07369f1bb55d207
+size 305488
diff --git a/resource/lfs/macOS/GnuPG/libs/libassuan.0.dylib b/resource/lfs/macOS/GnuPG/libs/libassuan.0.dylib
index 0c2e30f1..b1775f54 100644
--- a/resource/lfs/macOS/GnuPG/libs/libassuan.0.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libassuan.0.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:cb3249f69d5ae70e37f34203c714fa7d7509f0d113c3148d09fa26225a0d040a
-size 116064
+oid sha256:243914cefac155f1843f91331d2eb3326154ba5f68a1143b3882b8fc94f13bc4
+size 116640
diff --git a/resource/lfs/macOS/GnuPG/libs/libgcrypt.20.dylib b/resource/lfs/macOS/GnuPG/libs/libgcrypt.20.dylib
index 1144fbeb..e1a31ac4 100644
--- a/resource/lfs/macOS/GnuPG/libs/libgcrypt.20.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libgcrypt.20.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:d3ca9140d9284a305cd314cff49fca99eb1df3e001394c98dd65867bd2127101
-size 841456
+oid sha256:cc444590a050499a5f516284b43cedeba243822729b3c593ac458ca5a509a710
+size 842032
diff --git a/resource/lfs/macOS/GnuPG/libs/libgmp.10.dylib b/resource/lfs/macOS/GnuPG/libs/libgmp.10.dylib
index ca16b1b9..829aea2b 100644
--- a/resource/lfs/macOS/GnuPG/libs/libgmp.10.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libgmp.10.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:19080b0303dd8d93b9944d8227e75da9a7c8fef38ad062dcc379e4b878f38793
-size 485776
+oid sha256:ed2249f92c4386a97513991642ee9eb6af041c646e3c9fdab2ac4c6f468fefec
+size 486352
diff --git a/resource/lfs/macOS/GnuPG/libs/libgnutls.30.dylib b/resource/lfs/macOS/GnuPG/libs/libgnutls.30.dylib
index 4d127e9e..55330b13 100644
--- a/resource/lfs/macOS/GnuPG/libs/libgnutls.30.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libgnutls.30.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:cef5dc7859e074630c61ca44f459944b65bafd714d25da8f4b9169ab881ff85b
-size 1948336
+oid sha256:ddc00b098c8a5c43fcba2524d9c9a0cb323fd1f77e6b64a809927ebcf14f542c
+size 1948912
diff --git a/resource/lfs/macOS/GnuPG/libs/libgpg-error.0.dylib b/resource/lfs/macOS/GnuPG/libs/libgpg-error.0.dylib
index 4f6bb3f5..16479414 100644
--- a/resource/lfs/macOS/GnuPG/libs/libgpg-error.0.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libgpg-error.0.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:624accd5e2348747c8c9c4eeca4cd38a5fdd052c85d336adcafc1a2dad7c2cb6
-size 177920
+oid sha256:ac9396f90299bd5952399c5428ed41b285e1b35d97ff90ee7917f17b314df746
+size 178496
diff --git a/resource/lfs/macOS/GnuPG/libs/libhogweed.6.6.dylib b/resource/lfs/macOS/GnuPG/libs/libhogweed.6.6.dylib
index d5d2bf8f..e76bc3ae 100644
--- a/resource/lfs/macOS/GnuPG/libs/libhogweed.6.6.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libhogweed.6.6.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:2eddafad1bbf201494d4e95030744c37f5360e7b0cc65e78fd328c45f6817492
-size 299584
+oid sha256:e6581f0ae342f40ac50f205bbfb3cb3b639eeebad4aa10f0892aab4e2c42f1db
+size 300160
diff --git a/resource/lfs/macOS/GnuPG/libs/libidn2.0.dylib b/resource/lfs/macOS/GnuPG/libs/libidn2.0.dylib
index 28adab21..1e6338ba 100644
--- a/resource/lfs/macOS/GnuPG/libs/libidn2.0.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libidn2.0.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:48c542fec0e5b119be8f8d464cf820d9b9c82b0d7ff5f46aa5d5f5a91d7dc8c3
-size 259024
+oid sha256:308f59ceaa30199b39fdcb63080f86c0135beb744a0f73d89155bc94ed44ac1f
+size 259536
diff --git a/resource/lfs/macOS/GnuPG/libs/libintl.8.dylib b/resource/lfs/macOS/GnuPG/libs/libintl.8.dylib
index 9e6de4a6..ed4dfc46 100644
--- a/resource/lfs/macOS/GnuPG/libs/libintl.8.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libintl.8.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:4d4ae244ee6eccc97c66502de9be1b527cf6c4febe646bfb002d24b3fab30f72
-size 110640
+oid sha256:c55333e6fa8832b6f8a0276bfce9a50cecee95af2515e9d2fbde04074cfdbc5e
+size 111216
diff --git a/resource/lfs/macOS/GnuPG/libs/libksba.8.dylib b/resource/lfs/macOS/GnuPG/libs/libksba.8.dylib
index ef325009..20a0ceb5 100644
--- a/resource/lfs/macOS/GnuPG/libs/libksba.8.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libksba.8.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:44ae649dd7802e1bfbd9ac5b9395103e6652c386e975b96019d2824697e14c64
-size 266768
+oid sha256:e1604bb672c6a414b5c2dc2e3a5fc1a26554c74ec0790cf66c622d594466f04a
+size 267344
diff --git a/resource/lfs/macOS/GnuPG/libs/libnettle.8.6.dylib b/resource/lfs/macOS/GnuPG/libs/libnettle.8.6.dylib
index 4bd96490..5da22375 100644
--- a/resource/lfs/macOS/GnuPG/libs/libnettle.8.6.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libnettle.8.6.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:e2beebc87b572ecf599ef155ff1e11569e70076af48edea5426acd03acedda2a
-size 315088
+oid sha256:952c262111a35af64debcdcac6d38e9bf794b4602e6661625345b8f74813382d
+size 315664
diff --git a/resource/lfs/macOS/GnuPG/libs/libnpth.0.dylib b/resource/lfs/macOS/GnuPG/libs/libnpth.0.dylib
index 28d2e9d8..8b17220c 100644
--- a/resource/lfs/macOS/GnuPG/libs/libnpth.0.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libnpth.0.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:b98084e98e408e3b5d8340f42f1f9d76019add1b025c4c9e66decceb4023908d
-size 55888
+oid sha256:e01272a5843b3abf78ecd0862a09d6648c7217c31fc1eccac23f380e4f84d1ee
+size 56464
diff --git a/resource/lfs/macOS/GnuPG/libs/libp11-kit.0.dylib b/resource/lfs/macOS/GnuPG/libs/libp11-kit.0.dylib
index 73c89e13..6a974b2f 100644
--- a/resource/lfs/macOS/GnuPG/libs/libp11-kit.0.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libp11-kit.0.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:479ec561559b1dfef5707b6e173685baa2f23a4f6cfe1d0911229305eeeb30b2
-size 1022256
+oid sha256:1df14b9fd115d317087f606a312f3095082e3286da21801f4f5ac41449f1babd
+size 1022832
diff --git a/resource/lfs/macOS/GnuPG/libs/libreadline.8.2.dylib b/resource/lfs/macOS/GnuPG/libs/libreadline.8.2.dylib
index 1d5cdc8e..232ff1a9 100644
--- a/resource/lfs/macOS/GnuPG/libs/libreadline.8.2.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libreadline.8.2.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:50c3c0132d6e19615a4504b627592d7a6ecb680a9f4e7af5dab31f9535eded77
-size 295392
+oid sha256:b1c19c68716d6098eff03f3d2bb62d312b9ebcca44c7b51ccc67d6cd3329b1ed
+size 295968
diff --git a/resource/lfs/macOS/GnuPG/libs/libtasn1.6.dylib b/resource/lfs/macOS/GnuPG/libs/libtasn1.6.dylib
index 69c8b67c..22bc919e 100644
--- a/resource/lfs/macOS/GnuPG/libs/libtasn1.6.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libtasn1.6.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:633bd6416c4aba275fc5ccca7c2dc8e9077f28fb685e22751a40e10dbbaecef9
-size 124816
+oid sha256:57c57b889d791ffca6f3c128dc6396de707086c11d1067a7c92b9e55cff49950
+size 125328
diff --git a/resource/lfs/macOS/GnuPG/libs/libunistring.5.dylib b/resource/lfs/macOS/GnuPG/libs/libunistring.5.dylib
index 1fd90fbb..7fc15150 100644
--- a/resource/lfs/macOS/GnuPG/libs/libunistring.5.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libunistring.5.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:fd564b59706073e701c339fb35b89bdb3a655b5cb5965643eb6818e4b71c4289
-size 1848896
+oid sha256:c9f775e184335cc6bbb7e2b702f14054ac38672c4cd1648e12cedf4f2a4cd0e3
+size 1849472
diff --git a/resource/lfs/macOS/GnuPG/libs/libusb-1.0.0.dylib b/resource/lfs/macOS/GnuPG/libs/libusb-1.0.0.dylib
index 4bec2d13..569c5bdd 100644
--- a/resource/lfs/macOS/GnuPG/libs/libusb-1.0.0.dylib
+++ b/resource/lfs/macOS/GnuPG/libs/libusb-1.0.0.dylib
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:852d324bc493b7f394767b4811d3cb8aecd5fd96b15d0563173e2c561ff3ae92
-size 160528
+oid sha256:1e35b0eb52d44b464970aa671113f87089c4b540933437d2bf0dac8fcfc38fba
+size 161040
diff --git a/resource/lfs/macOS/GnuPG/scd/scdaemon b/resource/lfs/macOS/GnuPG/scd/scdaemon
new file mode 100755
index 00000000..ba7d6de6
--- /dev/null
+++ b/resource/lfs/macOS/GnuPG/scd/scdaemon
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1dd2a6bdf916e99dfbf6d662941661805de38f78bcf3522a9813fc430bede78e
+size 555632
diff --git a/resource/lfs/macOS/GnuPG/scdaemon/scdaemon b/resource/lfs/macOS/GnuPG/scdaemon/scdaemon
deleted file mode 100755
index 1d11733e..00000000
--- a/resource/lfs/macOS/GnuPG/scdaemon/scdaemon
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:762cb0e3f0d03323547cccb0f5a218b625228d610bdbe629bae9ed91dd45d9d8
-size 554960
diff --git a/resource/lfs/macOS/GnuPG/sm/gpgsm b/resource/lfs/macOS/GnuPG/sm/gpgsm
index 58ee62ed..784b56ba 100755
--- a/resource/lfs/macOS/GnuPG/sm/gpgsm
+++ b/resource/lfs/macOS/GnuPG/sm/gpgsm
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:5e338750ae7ef02e1b4ab9f6c6502ea4a9625022335094ade35d8eefe9908495
-size 549856
+oid sha256:9e660da5cdf99a0ff9be44326332a7d901b41a05136f279beb26dd81b4155555
+size 550544
diff --git a/resource/lfs/macOS/GnuPG/tools/gpg-connect-agent b/resource/lfs/macOS/GnuPG/tools/gpg-connect-agent
index dbd6cbb3..882568b5 100755
--- a/resource/lfs/macOS/GnuPG/tools/gpg-connect-agent
+++ b/resource/lfs/macOS/GnuPG/tools/gpg-connect-agent
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:aff17d1e70797c8abd7e40a3193e057c5c095591b7873e62c7b3994cd7949764
-size 202128
+oid sha256:2b696f753532e0ff1c149c6e0e4b602982aa3715f31456d448b1ee3dfacbb06b
+size 202832