Queries on default entitlements for running dotnet core on Mac Catalina

Question

We are hosting dotnet core runtime in our process using self contained app model. In order to run dotnet core runtime on Mac OS Catalina, we came across following link which list default entitlements required

https://learn.microsoft.com/en-us/dotnet/core/install/macos-notarization-issues

Default set of entitlements for .NET Core:

com.apple.security.cs.allow-jit
com.apple.security.cs.allow-unsigned-executable-memory
com.apple.security.cs.allow-dyld-environment-variables
com.apple.security.cs.disable-library-validation

We need to know why we need following entitlement to run dotnet core runtime and if there is a workaround to get rid of these entitlements. The additional entitlements seem to lower the security of the process.

com.apple.security.cs.allow-unsigned-executable-memory
com.apple.security.cs.allow-dyld-environment-variables

Answer 1

See this thread

https://github.com/dotnet/runtime/issues/64258