X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/866f8763175ff60e4fa455b92b5eb660a12fe6c7..90dc47c27df1983f6ebc252b0c4b94c8718fe52d:/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp

diff --git a/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp b/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp
index 3d96abd0..7a93ee24 100644
--- a/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp
+++ b/OSX/libsecurity_codesigning/lib/SecStaticCode.cpp
@@ -122,6 +122,7 @@ OSStatus SecStaticCodeCheckValidityWithErrors(SecStaticCodeRef staticCodeRef, Se
 		| kSecCSRestrictSymlinks
 		| kSecCSRestrictToAppLike
         | kSecCSUseSoftwareSigningCert
+	    | kSecCSValidatePEH
 	);
 
 	if (errors)