Include debug entitlements by default when building non-release builds.

The new behavior can be disabled by building with -c opt or
--nodevice_debug_entitlements.

RELNOTES: iOS apps are signed with get-task-allow=1 unless building with -c
opt.

--
MOS_MIGRATED_REVID=120827024

1 files changed, 12 insertions, 0 deletions

diff --git a/src/main/java/com/google/devtools/build/lib/rules/objc/ObjcConfiguration.java b/src/main/java/com/google/devtools/build/lib/rules/objc/ObjcConfiguration.java
index f8ed4411e2..d42bff1283 100644
--- a/src/main/java/com/google/devtools/build/lib/rules/objc/ObjcConfiguration.java
+++ b/src/main/java/com/google/devtools/build/lib/rules/objc/ObjcConfiguration.java
@@ -76,6 +76,7 @@ public class ObjcConfiguration extends BuildConfiguration.Fragment {
   private final boolean debugWithGlibcxx;
   private final boolean experimentalAutoTopLevelUnionObjCProtos;
   @Nullable private final Label extraEntitlements;
+  private final boolean deviceDebugEntitlements;
 
   ObjcConfiguration(ObjcCommandLineOptions objcOptions, BuildConfiguration.Options options,
       @Nullable BlazeDirectories directories) {
@@ -103,6 +104,7 @@ public class ObjcConfiguration extends BuildConfiguration.Fragment {
     this.extraEntitlements = objcOptions.extraEntitlements;
     this.experimentalAutoTopLevelUnionObjCProtos =
         objcOptions.experimentalAutoTopLevelUnionObjCProtos;
+    this.deviceDebugEntitlements = objcOptions.deviceDebugEntitlements;
   }
 
   /**
@@ -282,4 +284,14 @@ public class ObjcConfiguration extends BuildConfiguration.Fragment {
   public boolean experimentalAutoTopLevelUnionObjCProtos() {
     return experimentalAutoTopLevelUnionObjCProtos;
   }
+
+  /**
+   * Returns whether device debug entitlements should be included when signing an application.
+   *
+   * <p>Note that debug entitlements should not be included in compilation mode {@code opt}
+   * regardless of this setting.
+   */
+  public boolean useDeviceDebugEntitlements() {
+    return deviceDebugEntitlements;
+  }
 }