macos-security

macOS app security review checks notarization status, Hardened Runtime activation, App Sandbox enablement, and code signing validity. It ensures distributed apps meet macOS security requirements before release.

Hardened Runtime is a macOS security mechanism that must be activated for distributed apps. It works alongside App Sandbox and proper entitlements to enforce runtime protections, ensuring apps meet notarization eligibility and security review standards.

To check codesign and notary status, verify that code signing is valid and the notarization status is current using notarytool. This security review confirms the app is properly signed and eligible for macOS distribution.

Yes, App Sandbox must be enabled to pass a macOS security review. The review verifies sandbox usage alongside minimal entitlements and Hardened Runtime activation to ensure the distributed app meets security compliance standards.

You need to perform a macOS security review with notarytool during macOS app releases, notarization requests, and security reviews for distributed apps. It verifies notarization status, code signing, Hardened Runtime, and sandbox compliance.

During a macOS app security review, you should verify that appropriate minimal entitlements are configured. These entitlements must be checked alongside Hardened Runtime activation and App Sandbox usage to ensure proper security compliance.