Re: [Mono-dev] mono linker - mscorlib.dll

2011-01-07 Thread Jonathan Pryor 
On Jan 7, 2011, at 12:36 PM, Guillaume Pouillet wrote:
> Isn't AppDomain's security useable to sandbox the application ?

If Mono had a fully implemented Code Access Security (CAS) mechanism?  Yes.

Unfortunately, Mono doesn't, so AppDomain sandboxing doesn't work.

The only sandboxing/security mechanism that Mono supports is CoreCLR, as used 
in Moonlight/Silverlight.

 - Jon

___
Mono-devel-list mailing list
Mono-devel-list@lists.ximian.com
http://lists.ximian.com/mailman/listinfo/mono-devel-list

Re: [Mono-dev] mono linker - mscorlib.dll

2011-01-07 Thread Guillaume Pouillet 
Isn't AppDomain's security useable to sandbox the application ?
___
Mono-devel-list mailing list
Mono-devel-list@lists.ximian.com
http://lists.ximian.com/mailman/listinfo/mono-devel-list

Re: [Mono-dev] mono linker - mscorlib.dll

2011-01-07 Thread Miguel de Icaza 
>
> My application uses two different C# dlls and users can change/replace one
> of them. However, I don't want them to have file read/write access (ex. to
> write viruses...). I removed those functionality from mscorlib.dll using
> monolinker successfully, but the application crashes afterwards. I am not
> using Sytem.IO at all in my original dlls.
>

Mono uses this internally.

>
> Can monolinker be used this way? If so, what might possible be wrong?
> Unfortunately, I don't have any debug information since Visual Studio does
> not show where the program crashed.
>

You should not use the linker as a security system, it is not safe.

If you really must implement a security system, you might want to look at
using the CoreCLR Security subsystem used by Moonlight and Unity3D which is
part of Mono and familiarize yourself with CoreCLR security.   We do not
have many documents about it, so you will need to look at the source code of
Moonlight to figure it out.

Miguel
___
Mono-devel-list mailing list
Mono-devel-list@lists.ximian.com
http://lists.ximian.com/mailman/listinfo/mono-devel-list

[Mono-dev] mono linker - mscorlib.dll

2011-01-07 Thread marcus julius 
Hi,

I am using monolinker to remove some functionality that I don't want users to 
have in my embedded mono application.  

My application uses two different C# dlls and users can change/replace one of 
them. However, I don't want them to have file read/write access (ex. to write 
viruses...). I removed those functionality from mscorlib.dll using monolinker 
successfully, but the application crashes afterwards. I am not using Sytem.IO 
at all in my original dlls.

Can monolinker be used this way? If so, what might possible be wrong? 
Unfortunately, I don't have any debug information since Visual Studio does not 
show where the program crashed.

The linker is from mono-2.8.1 tarball release. 

Thanks for any help.


___
Mono-devel-list mailing list
Mono-devel-list@lists.ximian.com
http://lists.ximian.com/mailman/listinfo/mono-devel-list