Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / Security / February 2006

Tip: Looking for answers? Try searching our database.

Permissions on dynamically loaded assembly?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Jesper - 27 Feb 2006 22:56 GMT
I've created an app with a plugin structure which works if I trust the
plugin-author. Next I want to allow untrusted plugins to run under strict
access conditions.

I'm already loading the plugins into a secondary AppDomain, and I can set
code access security on this secondary appdomain to the "Execution"
Permissionset. Unfortunately, if I do this, I can no longer load anything
into this appdomain because I get a
System.Security.Permissions.FileIOPermission exception at the
Assembly.LoadFrom(...) regardless of what my plugin assembly contains. I
understand why it is happening, but is there no way around it? Is there some
way to dynamically load an assembly and execute (untrusted) code under tight
(Execution-Only) permissions?

Jesper
Dominick Baier [DevelopMentor] - 27 Feb 2006 23:20 GMT
Hi,

have a look at this article:
http://msdn.microsoft.com/msdnmag/issues/05/11/HostingAddIns/default.aspx

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> I've created an app with a plugin structure which works if I trust the
> plugin-author. Next I want to allow untrusted plugins to run under
[quoted text clipped - 11 lines]
>
> Jesper

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.