timamsk/OpenCore-Legacy-Patcher
1
0
Fork 0
mirror of https://github.com/dortania/OpenCore-Legacy-Patcher.git synced 2026-04-23 11:30:15 +10:00
Code Issues Packages Projects Releases Wiki Activity

macos_installer_handler.py: Add signature check

Browse Source
This commit is contained in:
Mykola Grymalyuk
2024-04-30 16:58:40 -06:00
parent a06b1f578e
commit ddb71e6776
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@@ -10,6 +10,8 @@
- Payloads: - Payloads:
- Remove redundant/unused files bundled in payloads.dmg - Remove redundant/unused files bundled in payloads.dmg
- Resolve unpatching Nvidia Web Drivers failing to clean up `/Library/Extensions` - Resolve unpatching Nvidia Web Drivers failing to clean up `/Library/Extensions`
- Implement preflight code signature checks for macOS installer creation
- Ensures validity of `createinstallmedia` binary before execution
## 1.4.3 ## 1.4.3
- Update non-Metal Binaries for macOS Sonoma: - Update non-Metal Binaries for macOS Sonoma:

5
opencore_legacy_patcher/support/macos_installer_handler.py
View File

@@ -139,7 +139,12 @@ class InstallerCreation():
logging.info(f"Failed to copy installer to {ia_tmp}") logging.info(f"Failed to copy installer to {ia_tmp}")
return False return False
# Verify code signature before executing
createinstallmedia_path = str(Path(installer_path) / Path("Contents/Resources/createinstallmedia")) createinstallmedia_path = str(Path(installer_path) / Path("Contents/Resources/createinstallmedia"))
if subprocess.run(["/usr/bin/codesign", "-v", "-R=anchor apple", createinstallmedia_path]).returncode != 0:
logging.info(f"Installer has broken code signature")
return False
plist_path = str(Path(installer_path) / Path("Contents/Info.plist")) plist_path = str(Path(installer_path) / Path("Contents/Info.plist"))
if Path(plist_path).exists(): if Path(plist_path).exists():
plist = plistlib.load(Path(plist_path).open("rb")) plist = plistlib.load(Path(plist_path).open("rb"))