[Mono-list] Questions in Interop

Sebastien Pouliot sebastien.pouliot at gmail.com
Mon Oct 3 08:20:26 EDT 2005


On Mon, 2005-03-10 at 11:25 +0200, Paolo Molaro wrote:
> > 3) what protection does Mono provide in such
> > scenarios.
> You may want to read about Code Access Security: when it is enabled,
> you'll need a specific permission to be able to make unmanaged calls.
> This feature is still in development in Mono.

The safest way to avoid unmanaged code being called is to create a
AppDomain-based sandbox and supply it with your own custom security
policy. You can look at NRobot to see how this can be done.

Support for disallowing (or allowing special cases) of managed code is
already present in recent Mono's version.

There are still other CAS pieces missing - but there's enough in place
to let you test and learn about the technology.

Have fun!
Sebastien Pouliot
email: sebastien at ximian.com
blog: http://pages.infinit.net/ctech/

More information about the Mono-list mailing list