U enable hardened runtime if macos version 10.13.6+

Author: fvarrui

src/main/java/io/github/fvarrui/javapackager/packagers/MacPackager.java

@@ -8,13 +8,15 @@
 import java.util.stream.Collectors;
 
 import org.apache.commons.lang3.StringUtils;
+import org.apache.commons.lang3.SystemUtils;
 import org.codehaus.plexus.util.cli.CommandLineException;
 
 import io.github.fvarrui.javapackager.model.Platform;
 import io.github.fvarrui.javapackager.utils.CommandUtils;
 import io.github.fvarrui.javapackager.utils.FileUtils;
 import io.github.fvarrui.javapackager.utils.Logger;
 import io.github.fvarrui.javapackager.utils.VelocityUtils;
+import io.github.fvarrui.javapackager.utils.VersionUtils;
 import io.github.fvarrui.javapackager.utils.XMLUtils;
 
 /**
@@ -147,8 +149,18 @@ public File doCreateApp() throws Exception {
 	}
 
 	private void codesign(String developerId, File entitlements, File appFile) throws IOException, CommandLineException {
+		
+		List<String> flags = new ArrayList<>();
+		if (VersionUtils.compareVersions("10.13.6", SystemUtils.OS_VERSION) >= 0) {
+			Logger.warn("Hardened runtime enabled!");			
+			flags.add("runtime"); // enable hardened runtime if Mac OS version >= 10.13.6 
+		}
+		
 		List<Object> codesignArgs = new ArrayList<>();
 		codesignArgs.add("--force");
+		if (!flags.isEmpty()) {			
+			codesignArgs.add("--options " + StringUtils.join(",", flags));
+		}
 		codesignArgs.add("--deep");
 		if (entitlements == null) {
 			Logger.warn("Entitlements file not specified");

src/main/java/io/github/fvarrui/javapackager/utils/VersionUtils.java

@@ -0,0 +1,34 @@
+package io.github.fvarrui.javapackager.utils;
+
+/**
+ * Java utils
+ */
+public class VersionUtils {
+	
+	private static int [] parseVersion(String version) {
+		String [] splittedVersion = version.split("\\.");
+		int [] parsedVersion = new int[splittedVersion.length];
+		for (int i = 0; i < splittedVersion.length; i++) {
+			parsedVersion[i] = Integer.parseInt(splittedVersion[i]);
+		}
+		return parsedVersion;
+	}
+	
+	/**
+	 * Compares two strings with version numbers
+	 * @param v1 First version string
+	 * @param v2 Second version string
+	 * @return 0 if equals, -1 if v1 less than v2, +1 if v1 greater than v2
+	 */
+	public static int compareVersions(String v1, String v2) {
+		int [] parsed1 = parseVersion(v1);
+		int [] parsed2 = parseVersion(v2);
+		int size = Math.min(parsed1.length, parsed2.length);
+		for (int i = 0; i < size; i++) {
+			if (parsed1[i] > parsed2[i]) return -1;
+			if (parsed1[i] < parsed2[i]) return 1;
+		}
+		return 0;
+	}
+
+}