473,320 Members | 1,694 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Sandboxing using AppDomain - Trust No One

Hi,

I am trying to implement an AppDomain to load addin assemblies (loaded in
memory using an array of bytes) for a project I am working on and what I
basically want is:

a) deny access to any local files in all drives
b) deny network access to any internal network addresses
c) deny network access to any external addresses
d) allow unrestricted access to a particular drive
e) allow network access to a particular IP range

I am trying to do that through PermissionSet's but it is not working. I
tried to find information on the web without success.

Any thoughts?

Thanks,
Robson
Jun 27 '08 #1
3 2260
Here is a link to a nice document describing CAS:

http://msdn.microsoft.com/en-us/library/aa302424.aspx
On May 16, 10:40*am, "Robson Felix" <rob...@robsonfelix.comwrote:
Hi,

I am trying to implement an AppDomain to load addin assemblies (loaded in
memory using an array of bytes) for a project I am working on and what I
basically want is:

a) deny access to any local files in all drives
b) deny network access to any internal network addresses
c) deny network access to any external addresses
d) allow unrestricted access to a particular drive
e) allow network access to a particular IP range

I am trying to do that through PermissionSet's but it is not working. I
tried to find information on the web without success.

Any thoughts?

Thanks,
Robson
Jun 27 '08 #2
I already saw this document but I was looking for something more practical.
Even though I applied some of what was exposed there, still didn't work.

<qg**********@mailinator.comwrote in message
news:65**********************************@w7g2000h sa.googlegroups.com...
Here is a link to a nice document describing CAS:

http://msdn.microsoft.com/en-us/library/aa302424.aspx
On May 16, 10:40 am, "Robson Felix" <rob...@robsonfelix.comwrote:
Hi,

I am trying to implement an AppDomain to load addin assemblies (loaded in
memory using an array of bytes) for a project I am working on and what I
basically want is:

a) deny access to any local files in all drives
b) deny network access to any internal network addresses
c) deny network access to any external addresses
d) allow unrestricted access to a particular drive
e) allow network access to a particular IP range

I am trying to do that through PermissionSet's but it is not working. I
tried to find information on the web without success.

Any thoughts?

Thanks,
Robson

Jun 27 '08 #3
Hi Robson,

Is System.AddIn (.net 3.5) a way? http://www.dsmyth.net/wiki/Articles_SystemAddin.ashx
Regards, Alex :: http://devkids.blogspot.com
Jun 27 '08 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: wycklk | last post by:
Suppose: Process 1 contains: AppDomain A, AppDomain B Process 2 contains: AppDomain C Is there any design guidelines on partitioning the AppDomain (for example, I should put AppDomain C...
5
by: Chris | last post by:
Hi I have a scenario where I've created another AppDomain to dynamically load a DLL(s) into. In this newly loaded DLL I want to call a static method on a class. The problem arise is that I have...
2
by: Foehammer | last post by:
Hello, I'm trying to load an assembly dynamically using an app domain. This is a proof-of-concept for a larger project, so please excuse the lame class names. TestLib is the dll where all the...
1
by: Jesse McGrew | last post by:
Hi, I'm trying to create an AppDomain and use it to load an assembly with reduced permissions (e.g. the "Internet" named permission set). Unfortunately, the permissions seem to be reduced *too*...
8
by: mike2036 | last post by:
I have an application (that has unmanaged code) and when I launch it without 'FullTrust' permissions (LocalIntranet_Zone), it crashes. When I set 'FullTrust' permissions, it launches fine. Is...
3
by: Frank Uray | last post by:
Hi all I have a problem with loading a assembly ... I am trying to do the following: - I have a directory with a dll (assembly) in it (not the currect dir.) - I am trying to load this assembly,...
0
by: mathboy2 | last post by:
Hey, I've created a very simple test app to try and fix a problem I'm having. Basically I'm trying to log to a text file from a class in a seperate app domain that I've created. When I first...
12
by: gregpinero | last post by:
This wiki page suggests using a chroot jail to sandbox Python, but wouldn't running something like this in your sandboxed Python instance still break you out of the chroot jail: os.execle...
1
by: nicerun | last post by:
I'm using the Application_Start event at Global.asax.cs to invoke thread that do some job. I know that Application_Start event occurs when the very first request to Web Application received. -...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.