Security-57031.20.26.tar.gz

[apple/security.git] / Security / libsecurity_codesigning / lib / SecStaticCode.cpp

diff --git a/Security/libsecurity_codesigning/lib/SecStaticCode.cpp b/Security/libsecurity_codesigning/lib/SecStaticCode.cpp
index 6d71272ce2fb2d526e49b1fcfb885e52a577e16a..cc4e8c17da0b5a8bd0d5a3da19f66db4d0f3892f 100644 (file)
--- a/Security/libsecurity_codesigning/lib/SecStaticCode.cpp
+++ b/Security/libsecurity_codesigning/lib/SecStaticCode.cpp
@@ -115,7 +115,9 @@ OSStatus SecStaticCodeCheckValidityWithErrors(SecStaticCodeRef staticCodeRef, Se
         | kSecCSEnforceRevocationChecks
                | kSecCSNoNetworkAccess
                | kSecCSCheckNestedCode
         | kSecCSEnforceRevocationChecks
                | kSecCSNoNetworkAccess
                | kSecCSCheckNestedCode

-               | kSecCSStrictValidate);
+               | kSecCSStrictValidate
+               | kSecCSCheckGatekeeperArchitectures
+       );

        
        if (errors)
                flags |= kSecCSFullReport;      // internal-use flag
        
        if (errors)
                flags |= kSecCSFullReport;      // internal-use flag