From 2382cd01536c37a3064ff1187adb656caa40aadb Mon Sep 17 00:00:00 2001
From: Max Goedjen <max.goedjen@gmail.com>
Date: Mon, 7 Sep 2026 19:44:22 -0700
Subject: [PATCH] Make enhanced security entitlements uniform (#833)

---
 Sources/SecretAgent/SecretAgent.entitlements                  | 2 +-
 .../SecretAgentHostsfileReader.entitlements                   | 4 ++++
 .../SecretAgentInputParser.entitlements                       | 2 +-
 Sources/Secretive/Secretive.entitlements                      | 2 +-
 Sources/SecretiveUpdater/SecretiveUpdater.entitlements        | 2 +-
 5 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/Sources/SecretAgent/SecretAgent.entitlements b/Sources/SecretAgent/SecretAgent.entitlements
index 28f4467..cbc3a31 100644
--- a/Sources/SecretAgent/SecretAgent.entitlements
+++ b/Sources/SecretAgent/SecretAgent.entitlements
@@ -13,7 +13,7 @@
 	<key>com.apple.security.hardened-process.dyld-ro</key>
 	<true/>
 	<key>com.apple.security.hardened-process.enhanced-security-version-string</key>
-	<string>1</string>
+	<string>2</string>
 	<key>com.apple.security.hardened-process.hardened-heap</key>
 	<true/>
 	<key>com.apple.security.hardened-process.platform-restrictions-string</key>
diff --git a/Sources/SecretAgentHostsfileReader/SecretAgentHostsfileReader.entitlements b/Sources/SecretAgentHostsfileReader/SecretAgentHostsfileReader.entitlements
index 9dca69b..e73b728 100644
--- a/Sources/SecretAgentHostsfileReader/SecretAgentHostsfileReader.entitlements
+++ b/Sources/SecretAgentHostsfileReader/SecretAgentHostsfileReader.entitlements
@@ -6,6 +6,10 @@
 	<true/>
 	<key>com.apple.security.hardened-process.checked-allocations</key>
 	<true/>
+	<key>com.apple.security.hardened-process.checked-allocations.enable-pure-data</key>
+	<true/>
+	<key>com.apple.security.hardened-process.checked-allocations.no-tagged-receive</key>
+	<true/>
 	<key>com.apple.security.hardened-process.dyld-ro</key>
 	<true/>
 	<key>com.apple.security.hardened-process.enhanced-security-version-string</key>
diff --git a/Sources/SecretAgentInputParser/SecretAgentInputParser.entitlements b/Sources/SecretAgentInputParser/SecretAgentInputParser.entitlements
index 7b72efc..6e24fa7 100644
--- a/Sources/SecretAgentInputParser/SecretAgentInputParser.entitlements
+++ b/Sources/SecretAgentInputParser/SecretAgentInputParser.entitlements
@@ -15,7 +15,7 @@
 	<key>com.apple.security.hardened-process.hardened-heap</key>
 	<true/>
 	<key>com.apple.security.hardened-process.enhanced-security-version-string</key>
-	<string>1</string>
+	<string>2</string>
 	<key>com.apple.security.hardened-process.platform-restrictions-string</key>
 	<string>2</string>
 </dict>
diff --git a/Sources/Secretive/Secretive.entitlements b/Sources/Secretive/Secretive.entitlements
index 9d1dc73..ab0a5b2 100644
--- a/Sources/Secretive/Secretive.entitlements
+++ b/Sources/Secretive/Secretive.entitlements
@@ -15,7 +15,7 @@
 	<key>com.apple.security.hardened-process.hardened-heap</key>
 	<true/>
 	<key>com.apple.security.hardened-process.enhanced-security-version-string</key>
-	<string>1</string>
+	<string>2</string>
 	<key>com.apple.security.smartcard</key>
 	<true/>
 	<key>com.apple.security.hardened-process.platform-restrictions-string</key>
diff --git a/Sources/SecretiveUpdater/SecretiveUpdater.entitlements b/Sources/SecretiveUpdater/SecretiveUpdater.entitlements
index f834c6d..e73b728 100644
--- a/Sources/SecretiveUpdater/SecretiveUpdater.entitlements
+++ b/Sources/SecretiveUpdater/SecretiveUpdater.entitlements
@@ -13,7 +13,7 @@
 	<key>com.apple.security.hardened-process.dyld-ro</key>
 	<true/>
 	<key>com.apple.security.hardened-process.enhanced-security-version-string</key>
-	<string>1</string>
+	<string>2</string>
 	<key>com.apple.security.hardened-process.hardened-heap</key>
 	<true/>
 	<key>com.apple.security.hardened-process.platform-restrictions-string</key>