Skip to content

docs(unreal): macOS Shipping network entitlements requirement #18010

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tustanivsky merged 3 commits into from
Jun 3, 2026
+38 −0
Merged

docs(unreal): macOS Shipping network entitlements requirement #18010

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
70b787e
docs(unreal): macOS Shipping network entitlements requirement
tustanivsky Jun 3, 2026
dd4bd9a
Update index.mdx
tustanivsky Jun 3, 2026
ae400c4
Correct Shipping entitlements configuration path
tustanivsky Jun 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions docs/platforms/unreal/configuration/crash-reporter/sentry-crash-reporter/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -116,3 +116,22 @@ After replacing binaries, delete your project's `Build` and `Intermediate` direc
The `CRASHPAD_ENABLE_STACKTRACE` feature is experimental. On Linux, it requires the `libunwind-ptrace` development package.

</Alert>

## Enabling Network Access on macOS

<Alert>

Applies only to **packaged macOS builds in the Shipping configuration**. Editor and Development/Test/DebugGame builds already include the required network entitlements.

</Alert>

The Sentry Crash Reporter uploads the crash envelope to Sentry, which requires the `com.apple.security.network.client` entitlement. On macOS the Crash Reporter is launched as a child process of the game and inherits its network permissions at runtime, so the entitlement needs to be set on the **game's** entitlements file rather than on the Crash Reporter bundle itself. Unreal's default Shipping entitlements file (`Engine/Build/Mac/Resources/Sandbox.NoNet.entitlements`) does **not** include it, so submissions fail with a DNS resolution error.

To fix this, override the Shipping entitlements in your project's `Config/DefaultEngine.ini` with either the engine-provided `Sandbox.Server.entitlements` (which includes `network.client` and `network.server`) or your own custom file:

```ini
[/Script/MacTargetPlatform.XcodeProjectSettings]
ShippingSpecificMacEntitlements=(FilePath="/Game/Build/Mac/Resources/Sandbox.Server.entitlements")
Comment thread
tustanivsky marked this conversation as resolved.
```

The same setting is available in the Editor under **Project Settings → Platforms → Mac → Entitlements → Mac: Entitlements (Shipping config override)**.
19 changes: 19 additions & 0 deletions docs/platforms/unreal/configuration/native-backend/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,3 +48,22 @@ Available modes:
- `Minidump` - Write and send a minidump for server-side symbolication. No client-side stack unwinding is performed.
- `NativeStackwalking` - Walk the stack client-side in the crash daemon and send a JSON event with stack traces. No minidump is generated, resulting in faster uploads and smaller payloads.
- `NativeStackwalkingWithMinidump` (default) - Perform client-side stack unwinding and also attach a minidump for deep debugging when needed.

### Enabling Network Access on macOS

<Alert>

Applies only to **packaged macOS builds in the Shipping configuration**. Editor and Development/Test/DebugGame builds already include the required network entitlements.

</Alert>

The native backend's out-of-process crash daemon uploads crash envelopes to Sentry from its own process, which requires the `com.apple.security.network.client` entitlement on the packaged macOS game. Unreal's default Shipping entitlements file (`Engine/Build/Mac/Resources/Sandbox.NoNet.entitlements`) does **not** include it, so uploads fail silently with a DNS resolution error.

To fix this, override the Shipping entitlements in your project's `Config/DefaultEngine.ini` with either the engine-provided `Sandbox.Server.entitlements` (which includes `network.client` and `network.server`) or your own custom file:

```ini
[/Script/MacTargetPlatform.XcodeProjectSettings]
ShippingSpecificMacEntitlements=(FilePath="/Game/Build/Mac/Resources/Sandbox.Server.entitlements")
```

The same setting is available in the Editor under **Project Settings → Platforms → Mac → Entitlements → Mac: Entitlements (Shipping config override)**.
Loading