[Mono-devel-list] Global dllmap entries?

Ben Maurer bmaurer at ximian.com
Sat Apr 9 11:38:37 EDT 2005


On Fri, 2005-04-08 at 23:35 -0400, Miguel de Icaza wrote:
> > Wouldn't that cause security problems (of course, after we start doing
> > security checks)? By loading my own dll with a configuration file, I
> > could map a trusted assembly to something hostile.
> 
> Very good point.  
> 
> Lets only allow global-dllmap for assemblies in the gac.

What does the per-assembly in the gac gain us over /etc/mono.d (per
jluke's suggestion)? mono.d is a more general solution -- it allows
sysadmins and packagers to make global modifications without having to
risk the machine.config file being clobbered by a mono upgrade -- and
fully solves your problem.

Also, I see no reason why a gac'd assembly is to be more well trusted
than a non-gac'd one. Granted, either way you would have to install an
rpm or something, but it'd be more obvious from rpm -qpl that a global
change was being made.

-- Ben




More information about the Mono-devel-list mailing list