Add hardened runtime, removing the need for root

Author: thecodewarrior

SwiftSplit.xcodeproj/project.pbxproj

@@ -7,7 +7,6 @@
 	objects = {
 
 /* Begin PBXBuildFile section */
-		CD27172E2572CB28004A81C8 /* main.swift in Sources */ = {isa = PBXBuildFile; fileRef = CD27172D2572CB28004A81C8 /* main.swift */; };
 		CD7CDBE5256F5D0D002AE46F /* AppDelegate.swift in Sources */ = {isa = PBXBuildFile; fileRef = CD7CDBE4256F5D0D002AE46F /* AppDelegate.swift */; };
 		CD7CDBE7256F5D0D002AE46F /* ViewController.swift in Sources */ = {isa = PBXBuildFile; fileRef = CD7CDBE6256F5D0D002AE46F /* ViewController.swift */; };
 		CD7CDBE9256F5D0F002AE46F /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = CD7CDBE8256F5D0F002AE46F /* Assets.xcassets */; };
@@ -24,7 +23,6 @@
 
 /* Begin PBXFileReference section */
 		2557401E37458142957F7D9D /* Pods-SwiftSplit.debug.xcconfig */ = {isa = PBXFileReference; includeInIndex = 1; lastKnownFileType = text.xcconfig; name = "Pods-SwiftSplit.debug.xcconfig"; path = "Target Support Files/Pods-SwiftSplit/Pods-SwiftSplit.debug.xcconfig"; sourceTree = "<group>"; };
-		CD27172D2572CB28004A81C8 /* main.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = main.swift; sourceTree = "<group>"; };
 		CD7CDBE1256F5D0D002AE46F /* SwiftSplit.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = SwiftSplit.app; sourceTree = BUILT_PRODUCTS_DIR; };
 		CD7CDBE4256F5D0D002AE46F /* AppDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppDelegate.swift; sourceTree = "<group>"; };
 		CD7CDBE6256F5D0D002AE46F /* ViewController.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ViewController.swift; sourceTree = "<group>"; };
@@ -98,7 +96,6 @@
 			children = (
 				CD7CDC06256F8A21002AE46F /* Core */,
 				CD7CDBE4256F5D0D002AE46F /* AppDelegate.swift */,
-				CD27172D2572CB28004A81C8 /* main.swift */,
 				CD7CDBE6256F5D0D002AE46F /* ViewController.swift */,
 				CD7CDC2725717D2D002AE46F /* CelesteSplitter.swift */,
 				CD7CDBE8256F5D0F002AE46F /* Assets.xcassets */,
@@ -246,7 +243,6 @@
 				CD7CDC01256F5DFC002AE46F /* CelesteEventGenerator.swift in Sources */,
 				CD7CDBE7256F5D0D002AE46F /* ViewController.swift in Sources */,
 				CD7CDBFF256F5DFC002AE46F /* CelesteScanner.swift in Sources */,
-				CD27172E2572CB28004A81C8 /* main.swift in Sources */,
 				CD7CDC05256F7304002AE46F /* MultiClientWebSocketServer.swift in Sources */,
 				CD7CDBE5256F5D0D002AE46F /* AppDelegate.swift in Sources */,
 				CD7CDC2825717D2D002AE46F /* CelesteSplitter.swift in Sources */,
@@ -391,6 +387,7 @@
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
 				DEVELOPMENT_TEAM = V2EPDFA9PV;
+				ENABLE_HARDENED_RUNTIME = YES;
 				INFOPLIST_FILE = SwiftSplit/Info.plist;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",
@@ -415,6 +412,7 @@
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
 				DEVELOPMENT_TEAM = V2EPDFA9PV;
+				ENABLE_HARDENED_RUNTIME = YES;
 				INFOPLIST_FILE = SwiftSplit/Info.plist;
 				LD_RUNPATH_SEARCH_PATHS = (
 					"$(inherited)",

SwiftSplit.xcodeproj/xcshareddata/xcschemes/SwiftSplit.xcscheme

@@ -34,7 +34,6 @@
       buildConfiguration = "Debug"
       selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
       selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
-      debugAsWhichUser = "root"
       launchStyle = "0"
       useCustomWorkingDirectory = "NO"
       ignoresPersistentStateOnLaunch = "NO"

SwiftSplit/AppDelegate.swift

@@ -8,7 +8,7 @@
 
 import Cocoa
 
-//@NSApplicationMain // we use a custom main, so we don't want an implicit one generated for us
+@NSApplicationMain
 class AppDelegate: NSObject, NSApplicationDelegate {
 
     func applicationDidFinishLaunching(_ aNotification: Notification) {

SwiftSplit/SwiftSplit.entitlements

@@ -4,6 +4,8 @@
 <dict>
 	<key>com.apple.security.app-sandbox</key>
 	<false/>
+	<key>com.apple.security.cs.debugger</key>
+	<true/>
 	<key>com.apple.security.files.user-selected.read-only</key>
 	<false/>
 </dict>

SwiftSplit/ViewController.swift

@@ -132,10 +132,10 @@ class ViewController: NSViewController {
         }
 
         do {
-            self.ignorePid = pid
             self.splitter = try CelesteSplitter(pid: pid, server: server)
             self.splitter?.routeConfig = routeConfig
             connectionStatusLabel.stringValue = "Connected"
+            self.ignorePid = pid
         } catch {
             print("Error creating splitter: \(error)")
         }