X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/d8f41ccd20de16f8ebe2ccc84d47bf1cb2b26bbb..60c433a9f80a92b51b33f65f1f58883e8fe843be:/Security/libsecurity_codesigning/lib/policyengine.cpp

diff --git a/Security/libsecurity_codesigning/lib/policyengine.cpp b/Security/libsecurity_codesigning/lib/policyengine.cpp
index 286199b2..6e03d8f2 100644
--- a/Security/libsecurity_codesigning/lib/policyengine.cpp
+++ b/Security/libsecurity_codesigning/lib/policyengine.cpp
@@ -144,7 +144,7 @@ void PolicyEngine::evaluateCodeItem(SecStaticCodeRef code, CFURLRef path, Author
 		
 		CFRef<SecRequirementRef> requirement;
 		MacOSError::check(SecRequirementCreateWithString(CFTempString(reqString), kSecCSDefaultFlags, &requirement.aref()));
-		switch (OSStatus rc = SecStaticCodeCheckValidity(code, kSecCSBasicValidateOnly, requirement)) {
+		switch (OSStatus rc = SecStaticCodeCheckValidity(code, kSecCSBasicValidateOnly | kSecCSCheckGatekeeperArchitectures, requirement)) {
 		case errSecSuccess:
 			break;						// rule match; process below
 		case errSecCSReqFailed: