macOS 10.15: QOpen/SaveFileDialog doesn't show up at all after signing the .app with hardened runtime enabled (codesign --options=runtime)

Violet Giraffe

I'm investigating the problem described in the title: everything works fine until I sign the .app, but after signing with hardened runtime (which means sandbox enabled) . If signed without the--options=runtime flag, everything is OK.
Any idea why this happens and how to fix it? Perhaps, some specific permission has to be requested via entitlements.plist?

Hardened runtime is a requirement for app notarization so avoiding it may soon become impossible (if not already impossible).
P. S. Tested with Qt 5.12.5.

SGaist

Hi,

Sorry can't directly help you with that one but did you also test with the latest stable release ?

Violet Giraffe

@SGaist, do you mean 5.13.2? No, I read the list of changes and there was nothing important for desktop development. But if you think it could help, I can test with 13.2 as well.

Violet Giraffe

P. S. My entitlements.plist looks like this for now:

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>com.apple.security.app-sandbox</key>
    <true/>
    <key>com.apple.security.network.client</key>
    <true/>
    <key>com.apple.security.temporary-exception.files.absolute-path.read-write</key>
    <array>
      <string>/</string>
    </array>
  </dict>
</plist>

Update: tried 5.13.2, same thing.