Security-57031.30.12.tar.gz

[apple/security.git] / Security / libsecurity_codesigning / lib / policyengine.cpp

diff --git a/Security/libsecurity_codesigning/lib/policyengine.cpp b/Security/libsecurity_codesigning/lib/policyengine.cpp
index 286199b2533f33200cb9703fc64ba67ce438b13f..6e03d8f23789dcf13be0b2bc632acd5c8929484e 100644 (file)
--- a/Security/libsecurity_codesigning/lib/policyengine.cpp
+++ b/Security/libsecurity_codesigning/lib/policyengine.cpp
@@ -144,7 +144,7 @@ void PolicyEngine::evaluateCodeItem(SecStaticCodeRef code, CFURLRef path, Author
                
                CFRef<SecRequirementRef> requirement;
                MacOSError::check(SecRequirementCreateWithString(CFTempString(reqString), kSecCSDefaultFlags, &requirement.aref()));
                
                CFRef<SecRequirementRef> requirement;
                MacOSError::check(SecRequirementCreateWithString(CFTempString(reqString), kSecCSDefaultFlags, &requirement.aref()));

-               switch (OSStatus rc = SecStaticCodeCheckValidity(code, kSecCSBasicValidateOnly, requirement)) {
+               switch (OSStatus rc = SecStaticCodeCheckValidity(code, kSecCSBasicValidateOnly | kSecCSCheckGatekeeperArchitectures, requirement)) {

                case errSecSuccess:
                        break;                                          // rule match; process below
                case errSecCSReqFailed:
                case errSecSuccess:
                        break;                                          // rule match; process below
                case errSecCSReqFailed: