diff --git a/.gitignore b/.gitignore
index 42c00a6b9..28a27b919 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,3 +8,4 @@ dist
 config/local.json
 config/local-*.json
 .DS_Store
+*.provisionprofile
diff --git a/build/entitlements.mas.plist b/build/entitlements.mas.plist
new file mode 100644
index 000000000..5bfb52be4
--- /dev/null
+++ b/build/entitlements.mas.plist
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>com.apple.security.app-sandbox</key>
+    <true/>
+    <key>com.apple.security.network.client</key>
+    <true/>
+    <key>com.apple.security.files.user-selected.read-only</key>
+    <true/>
+    <key>com.apple.security.files.user-selected.read-write</key>
+    <true/>
+  </dict>
+</plist>
diff --git a/package.json b/package.json
index bcb1904c3..527be4165 100644
--- a/package.json
+++ b/package.json
@@ -56,7 +56,8 @@
         "bucket": "updates.signal.org",
         "path": "desktop",
         "acl": "public-read"
-      }
+      },
+      "target": "mas"
     },
     "win": {
       "artifactName": "${productName}-Setup_${version}.${ext}",