Contents

com.apple.security.hardened-process.hardened-heap

A Boolean value that indicates whether your app or extension opts in to additional hardening for heap allocations.

Discussion

When you add this entitlement to your app or extension, the system applies additional restrictions to the type-aware memory allocator for memory your app or extension requests. These may include enforcing address space isolation of certain types by limiting the cumulative amount of virtual memory it can allocate, and probabilistically placing inaccessible guard pages around live allocations or upon deallocation.

In addition to this entitlement, set the build settings CLANG_ENABLE_C_TYPED_ALLOCATOR_SUPPORT and CLANG_ENABLE_CPLUSPLUS_TYPED_ALLOCATOR_SUPPORT to YES, so the compiler rewrites memory allocations in your code to use the type-aware allocator.

Xcode adds this entitlement to your app or extension when you add the Enhanced Security capability. For more information, see Enabling enhanced security for your app.

See Also

Hardened process