add com.apple.security.device.audio-input entitlement on macOS

[Be-ing]

fixes https://bugs.launchpad.net/mixxx/+bug/1917530

[Holzhaus]

Lol, PR race condition: #3682

[Holzhaus]

Please add some comments to clarify the distinction between the microphone and the audio-input entitlement. If you'd lazy you can just cherry pick the commit from my fork.

[Be-ing]

I actually don't know what the difference is and Apple's documentation doesn't make it clear.

[Holzhaus]

I actually don't know what the difference is and Apple's documentation doesn't make it clear.

Check my PR, I added comments there.

[Be-ing]

I can't reproduce the bug on macOS 10.13. It might only affect later versions of macOS.

[Holzhaus]

I can't reproduce the bug on macOS 10.13. It might only affect later versions of macOS.

Yes, the hardened runtime was introduced in macOS Mojave (10.14).

[Be-ing]

Confirmed working: https://mixxx.discourse.group/t/v2-3-beta-issue-with-mic-on-big-sur-m1/21349/11

[Holzhaus]

Please add some comments to clarify the distinction between the microphone and the audio-input entitlement. If you'd lazy you can just cherry pick the commit from my fork.

Ping! Please don't merge your own PR, especially if there are still comments from review that have not been resolved.

[Be-ing]

I disagree with your proposed comments. They don't add any information. As I said before, I don't actually know what the difference between these confusingly named entitlements are and Apple's documentation doesn't clarify, so I don't know what comment could be helpful.

[Holzhaus]

I disagree with your proposed comments. They don't add any information. As I said before, I don't actually know what the difference between these confusingly named entitlements are and Apple's documentation doesn't clarify, so I don't know what comment could be helpful.

Yes they do. They make clear that these entitlements are for two different, independent systems that partially overlap:

• Sandboxing
• Hardened Runtime

You can build an app with sandboxing but without hardened runtime, with hardened runtime but without sandboxing, with both or with none of them.

• https://developer.apple.com/documentation/security/hardened_runtime
• https://developer.apple.com/documentation/security/app_sandbox

Also see: https://lapcatsoftware.com/articles/hardened-runtime-sandboxing2.html

[daschuer]

The missing documentation was added here: #3685
Thank you.