[Mono-list] Questions in Interop

Mon Oct 3 08:20:26 EDT 2005

Hello,

On Mon, 2005-03-10 at 11:25 +0200, Paolo Molaro wrote:
> > 3) what protection does Mono provide in such
> > scenarios.
> 
> You may want to read about Code Access Security: when it is enabled,
> you'll need a specific permission to be able to make unmanaged calls.
> This feature is still in development in Mono.

The safest way to avoid unmanaged code being called is to create a
AppDomain-based sandbox and supply it with your own custom security
policy. You can look at NRobot to see how this can be done.
http://pages.infinit.net/ctech/20050520-0735.html

Support for disallowing (or allowing special cases) of managed code is
already present in recent Mono's version.
http://pages.infinit.net/ctech/20050623-0432.html

There are still other CAS pieces missing - but there's enough in place
to let you test and learn about the technology.

Have fun!
-- 
Sebastien Pouliot
email: sebastien at ximian.com
blog: http://pages.infinit.net/ctech/