[PR #146] [CLOSED] fix: add disable-library-validation entitlement for macOS #214

New issue

Closed

opened 2026-10-18 14:07:03 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-18 14:07:03 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/desktop/pull/146
Author: @bsisduck
Created: 4/24/2026
Status: ❌ Closed

Base: main ← Head: fix/macos-library-validation-entitlement

📝 Commits (1)

e4b7bc3 fix: add disable-library-validation entitlement for macOS

📊 Changes

1 file changed (+2 additions, -0 deletions)

View changed files

📝 build/entitlements.mac.plist (+2 -0)

📄 Description

Summary

Adds com.apple.security.cs.disable-library-validation entitlement to build/entitlements.mac.plist
Fixes app crash at launch on macOS caused by DYLD Team ID mismatch between the main binary and Electron Framework

Context

The app fails to launch with:

Library not loaded: @rpath/Electron Framework.framework/Electron Framework
Reason: mapping process and mapped file (non-platform) have different Team IDs

macOS enforces that loaded dylibs must share the same Team ID as the host binary unless the app opts out via com.apple.security.cs.disable-library-validation. This is standard practice for Electron apps.

Test plan

Built and packaged the app (npx electron-builder --mac --dir)
Verified entitlement is embedded (codesign -d --entitlements -)
Launched the app — no crash, process stays running
Confirmed no new crash reports in ~/Library/Logs/DiagnosticReports/

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/desktop/pull/146 **Author:** [@bsisduck](https://github.com/bsisduck) **Created:** 4/24/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `fix/macos-library-validation-entitlement` --- ### 📝 Commits (1) - [`e4b7bc3`](https://github.com/open-webui/desktop/commit/e4b7bc35f775e6307c479a22a066c9517a8a31e0) fix: add disable-library-validation entitlement for macOS ### 📊 Changes **1 file changed** (+2 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `build/entitlements.mac.plist` (+2 -0) </details> ### 📄 Description ## Summary - Adds `com.apple.security.cs.disable-library-validation` entitlement to `build/entitlements.mac.plist` - Fixes app crash at launch on macOS caused by DYLD Team ID mismatch between the main binary and Electron Framework ## Context The app fails to launch with: ``` Library not loaded: @rpath/Electron Framework.framework/Electron Framework Reason: mapping process and mapped file (non-platform) have different Team IDs ``` macOS enforces that loaded dylibs must share the same Team ID as the host binary unless the app opts out via `com.apple.security.cs.disable-library-validation`. This is standard practice for Electron apps. ## Test plan - [x] Built and packaged the app (`npx electron-builder --mac --dir`) - [x] Verified entitlement is embedded (`codesign -d --entitlements -`) - [x] Launched the app — no crash, process stays running - [x] Confirmed no new crash reports in `~/Library/Logs/DiagnosticReports/` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-18 14:07:03 +00:00