samply 0.13.1

A command line profiler for macOS and Linux.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

use std::env;
use std::io::Write;

const ENTITLEMENTS_XML: &str = r#"<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>com.apple.security.cs.debugger</key>
	<true/>
</dict>
</plist>
"#;

pub fn codesign_setup(skip_prompt: bool) {
    if !skip_prompt {
        print!(
            r#"
On macOS, attaching to an existing process is only allowed to binaries with
the com.apple.security.cs.debugger entitlement. The samply binary will be
signed with this entitlement for your local machine only. The following command
will be run:

    codesign --force --options runtime --sign - \
      --entitlements entitlements.xml {}

entitlements.xml contains:
    
    {}

Press any key to continue, or Ctrl-C to cancel.
"#,
            env::current_exe().unwrap().display(),
            ENTITLEMENTS_XML
        );

        let mut input = String::new();
        std::io::stdin()
            .read_line(&mut input)
            .expect("Failed to read input?");
    }

    let mut entitlements_file = tempfile::Builder::new()
        .prefix("samply_entitlements")
        .suffix(".xml")
        .tempfile()
        .expect("Failed to create temporary file for entitlements!");

    entitlements_file
        .write_all(ENTITLEMENTS_XML.as_bytes())
        .expect("Failed to write entitlements to temporary file!");

    let entitlements_path = entitlements_file.path();

    // codesign for the current machine:
    //    codesign --force --options runtime --sign - --entitlements ent.xml target/debug/usamply
    std::process::Command::new("codesign")
        .arg("--force")
        .arg("--options")
        .arg("runtime")
        .arg("--sign")
        .arg("-")
        .arg("--entitlements")
        .arg(entitlements_path)
        .arg(env::current_exe().unwrap())
        .output()
        .expect("Failed to run codesign!");

    println!(r"Code signing successful!");
}