From f193a7bf8012fbb588e84d50ef5a02a1a67534bb Mon Sep 17 00:00:00 2001 From: Michael Telatynski <7t3chguy@gmail.com> Date: Mon, 4 Nov 2024 13:32:23 +0000 Subject: [PATCH 1/2] Enable fuse EnableEmbeddedAsarIntegrityValidation Signed-off-by: Michael Telatynski <7t3chguy@gmail.com> --- electron-builder.ts | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/electron-builder.ts b/electron-builder.ts index ae0d06784..e7223c6ba 100644 --- a/electron-builder.ts +++ b/electron-builder.ts @@ -83,8 +83,7 @@ const config: Writable = { // Mac app crashes on arm for us when `LoadBrowserProcessSpecificV8Snapshot` is enabled [FuseV1Options.LoadBrowserProcessSpecificV8Snapshot]: false, - // https://github.com/electron/fuses/issues/7 - [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: false, + [FuseV1Options.EnableEmbeddedAsarIntegrityValidation]: true, }); } }, From d7239d6fd59b4587493e12b8587cabe1ff319148 Mon Sep 17 00:00:00 2001 From: Michael Telatynski <7t3chguy@gmail.com> Date: Mon, 4 Nov 2024 14:32:40 +0000 Subject: [PATCH 2/2] Disable fuse GrantFileProtocolExtraPrivileges Signed-off-by: Michael Telatynski <7t3chguy@gmail.com> --- electron-builder.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/electron-builder.ts b/electron-builder.ts index e7223c6ba..2e690c6a6 100644 --- a/electron-builder.ts +++ b/electron-builder.ts @@ -72,10 +72,12 @@ const config: Writable = { await flipFuses(electronBinaryPath, { version: FuseVersion.V1, + strictlyRequireAllFuses: true, resetAdHocDarwinSignature: context.electronPlatformName === "darwin" && context.arch === Arch.universal, [FuseV1Options.EnableCookieEncryption]: true, [FuseV1Options.OnlyLoadAppFromAsar]: true, + [FuseV1Options.GrantFileProtocolExtraPrivileges]: true, [FuseV1Options.RunAsNode]: false, [FuseV1Options.EnableNodeOptionsEnvironmentVariable]: false,