From 874538d702e6c69d2d152ef33919dff21ea8c985 Mon Sep 17 00:00:00 2001
From: "opencode-agent[bot]"
 <219766164+opencode-agent[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 12:53:00 +0000
Subject: [PATCH] fix(desktop): restrict macOS app entitlements (#45258)

Co-authored-by: Brendonovich <14191578+Brendonovich@users.noreply.github.com>
---
 packages/desktop/resources/entitlements.plist | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/packages/desktop/resources/entitlements.plist b/packages/desktop/resources/entitlements.plist
index b61dc022280..cb9a9891fa5 100644
--- a/packages/desktop/resources/entitlements.plist
+++ b/packages/desktop/resources/entitlements.plist
@@ -4,14 +4,6 @@
 <dict>
     <key>com.apple.security.cs.allow-jit</key>
     <true/>
-    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
-    <true/>
-    <key>com.apple.security.cs.disable-executable-page-protection</key>
-    <true/>
-    <key>com.apple.security.cs.allow-dyld-environment-variables</key>
-    <true/>
-    <key>com.apple.security.cs.disable-library-validation</key>
-    <true/>
     <key>com.apple.security.device.audio-input</key>
     <true/>
 </dict>