fix: disable Chromium v2 sandbox in MAS builds

electron · Feb 13, 2019 · 18fb6b2 · 18fb6b2
1 parent cd9bf72
commit 18fb6b2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 6 deletions.
diff --git a/BUILD.gn b/BUILD.gn
@@ -716,9 +716,11 @@ if (is_mac) {
     output_name = electron_helper_name
     deps = [
       ":electron_framework+link",
-      "//sandbox/mac:seatbelt",
     ]
-    defines = [ "HELPER_EXECUTABLE" ]
+    if (!is_mas_build) {
+      deps += [ "//sandbox/mac:seatbelt" ]
+      defines = [ "ENABLE_SEATBELT" ]
+    }
     sources = filenames.app_sources
     include_dirs = [ "." ]
     info_plist = "atom/renderer/resources/mac/Info.plist"

diff --git a/atom/app/atom_main.cc b/atom/app/atom_main.cc
@@ -43,9 +43,9 @@
 #include "base/i18n/icu_util.h"
 #include "electron/buildflags/buildflags.h"
 
-#if defined(HELPER_EXECUTABLE)
+#if defined(ENABLE_SEATBELT)
 #include "sandbox/mac/seatbelt_exec.h"  // nogncheck
-#endif                                  // defined(HELPER_EXECUTABLE)
+#endif                                  // defined(ENABLE_SEATBELT)
 
 namespace {
 
@@ -213,7 +213,7 @@ int main(int argc, char* argv[]) {
   }
 #endif
 
-#if defined(HELPER_EXECUTABLE)
+#if defined(ENABLE_SEATBELT)
   uint32_t exec_path_size = 0;
   int rv = _NSGetExecutablePath(NULL, &exec_path_size);
   if (rv != -1) {
@@ -240,7 +240,7 @@ int main(int argc, char* argv[]) {
       abort();
     }
   }
-#endif
+#endif  // defined(ENABLE_SEATBELT)
 
   return AtomMain(argc, argv);
 }