alt Hacker NewsEntitlements are a great system for user applications, but pretty much unusable for OSS system applications as AIUI they need codesigned binaries
Replies
kccqzy • today at 1:54 AM
They could have designed a system to put the code signature inside Mach-O but they chose not to.
Code signing and entitlements are integrated into the binary.
(Restricted entitlements require a provisioning profile which requires a bundle, but restricted entitlements are pretty rare)