[Mono-list] Sandbox

[David Curylo]

The first thing that comes to mind for this sort of thing on Posix environments is using chroot to isolate the process and then communicate with it via some dedicated IPC channel, although I’m not so sure about how to set chroot up from managed code.

On Jan 11, 2015, at 7:54 AM, Ollhax <ollhak at gmail.com> wrote:

> Hi there! I'm looking for a way to run some C# code in a sandbox using Mono.
> 
> If it's relevant, I'm working on a game where I'd like to enable players
> sharing mods containing scripts written in C#. The problem is that I
> obviously can't let these scripts do any file operations, or just anything
> else that can be harmful to a player's computer.
> 
> It's not too hard to set this up on Windows using AppDomains, but I'd like
> to find a solution for Mac/Linux as well. I've dug around after information
> on how to do this on Mono, but I'm not sure how up to date the documentation
> about it is. As far as I've understood it, AppDomains are supported, but CAS
> (required for actually sandboxing the code) is an experimental/dead branch
> (http://www.mono-project.com/docs/advanced/cas/).
> 
> Is there any way to sandbox code in Mono? If not, are there any plans for
> future support?
> 
> Thankful for any help.
> /Olle
> 
> 
> 
> --
> View this message in context: http://mono.1490590.n4.nabble.com/Sandbox-tp4665163.html
> Sent from the Mono - General mailing list archive at Nabble.com.
> _______________________________________________
> Mono-list maillist  -  Mono-list at lists.ximian.com
> http://lists.ximian.com/mailman/listinfo/mono-list