From eb0ce659d906b03ec42b9419ff370c6200a5ec29 Mon Sep 17 00:00:00 2001
From: Ariver <shanghai3168@gmail.com>
Date: Tue, 07 Jul 2026 15:13:13 +0800
Subject: [PATCH] release: rebuild 8.3.6 app store package permissions

---
 C1.source/Scripts/macos14_build_metadata_qa.sh |   14 ++++++++++++++
 1 files changed, 14 insertions(+), 0 deletions(-)

diff --git a/C1.source/Scripts/macos14_build_metadata_qa.sh b/C1.source/Scripts/macos14_build_metadata_qa.sh
index 77b5af7..80d7d52 100755
--- a/C1.source/Scripts/macos14_build_metadata_qa.sh
+++ b/C1.source/Scripts/macos14_build_metadata_qa.sh
@@ -17,6 +17,20 @@
 [[ -f "$INFO_PLIST" ]] || fail "Info.plist not found: $INFO_PLIST"
 [[ -x "$EXECUTABLE" ]] || fail "executable not found or not executable: $EXECUTABLE"
 
+unreadable_dirs="$(find "$APP_BUNDLE" -type d ! -perm -005 -print | head -20)"
+if [[ -n "$unreadable_dirs" ]]; then
+  fail "app bundle contains directories not readable/searchable by non-root users: $unreadable_dirs"
+fi
+
+unreadable_files="$(find "$APP_BUNDLE" -type f ! -perm -004 -print | head -20)"
+if [[ -n "$unreadable_files" ]]; then
+  fail "app bundle contains files not readable by non-root users: $unreadable_files"
+fi
+
+if find "$EXECUTABLE" -type f ! -perm -005 -print | grep -q .; then
+  fail "main executable is not readable/executable by non-root users: $EXECUTABLE"
+fi
+
 actual_minimum_system="$(/usr/libexec/PlistBuddy -c 'Print :LSMinimumSystemVersion' "$INFO_PLIST")"
 if [[ "$actual_minimum_system" != "$EXPECTED_MINIMUM_SYSTEM" ]]; then
   fail "LSMinimumSystemVersion expected $EXPECTED_MINIMUM_SYSTEM, got $actual_minimum_system"

--
Gitblit v1.9.3