Security-58286.70.7.tar.gz

[apple/security.git] / OSX / libsecurity_codesigning / lib / SecStaticCode.cpp

diff --git a/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp b/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp
index 3d96abd051ef60ad52fe09dfcc0155fa8b0ae954..7a93ee246e74945fd02a737416a5308b61ca182a 100644 (file)
--- a/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp
+++ b/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp
@@ -122,6 +122,7 @@ OSStatus SecStaticCodeCheckValidityWithErrors(SecStaticCodeRef staticCodeRef, Se
                | kSecCSRestrictSymlinks
                | kSecCSRestrictToAppLike
         | kSecCSUseSoftwareSigningCert
+           | kSecCSValidatePEH
        );
 
        if (errors)