[Mono-devel-list] GAC and third party libraries: post Beta planning.

Michal Moskal malekith at pld-linux.org
Thu May 6 07:23:07 EDT 2004


On Thu, May 06, 2004 at 01:10:34PM +0200, Eduard Ralph wrote:
> I haven't fully followed this discussion, so if I'm reitirating something just 
> ignore it. Has anybody considered security issues and things like that? Also 
> the configuration features one has as Admin in the .NET Configuration 
> Console? I think one shouldn't forget those issues in this discussion.

What security issues? We expect user compiling programs to trust:

  a) the root or anyone else who has write access in /usr/lib/*, and
     /usr/lib/mono/gac and /usr/lib/pkgconfig specifically
  b) the users who have write access in his PATH
  c) himself, or anybody else who has write access in current
     compilation directory
     
This are the usual Unix assumptions.

-- 
: Michal Moskal :: http://www.kernel.pl/~malekith :: GCS !tv h e>+++ b++
: When in doubt, use brute force. -- Ken Thompson :: UL++++$ C++ E--- a?



More information about the Mono-devel-list mailing list