tags:

views:

69

answers:

1
+2  Q: 

Stopping a third party assembly from accessing resources

We have a third party library referenced in our project, but without access to the source I don't really know what it's doing under the hood and there's too much code to check it out with Reflector.

Is there any easy way to completely sandbox it so it can't access the file system, network, registry etc.?

I'm trying to get up to speed with security, but it's a huge topic.

A: 

http://www.csharp411.com/executing-code-in-partial-trust-environments/

Look at configuring the assembly for partial trust. The article should give you the basics to help you get started... (or to know where else to look)

Hope this helps!

jwwishart  2010-02-23 02:10:05
Thanks. Basically we have an application which runs in a full trust environment, but the third party tool which will ship with it we DON'T trust in the slightest. Basically we want to make sure it can't do anything malicious with the registry, file system etc. I managed to achieve this by imperatively denying all sorts of permissions before we make calls into the assembly, but surely there must be an eaiser way? Looks like I have some reading to do.
LMC  2010-02-23 04:33:06
Why are you using it in the first place if you don't trust it?
logicnp  2010-02-23 07:48:00

related questions

Displaying Flash content in a C# WinForms application
How to get the value of built, encoded ViewState?
Unhandled Exception Handler in .NET 1.1
How do I connect to a database and loop over a recordset in C#?
How do I most elegantly express left join with aggregate SQL as LINQ query
Get a new object instance from a Type in C#
.NET Testing Framework Advice
Automatically update version number
What is the difference between an int and an Integer in Java/C#?
How to write to Web.Config in Medium Trust ?
WinForms ComboBox data binding gotcha
How do you sort a C# dictionary by value?
Adding Scripting functionality to .NET applications
Floating Point Number parsing: Is there a Catch All algorithm?
How do I print an HTML document from a web service?
Decoding T-SQL CAST in C#/VB.net
Anatomy of a "Memory Leak"
How do I get a distinct, ordered list of names from a DataTable using Linq
Reliable Timer in a Console Application
How do I fill a DataSet or a DataTable from a LINQ query resultset ?
What's the difference between Math.Floor() and Math.Truncate() in .NET?
How do I calculate relative time?
How do I calculate someone's age in C#?
Are there any conversion tools for porting Visual J# code to C#?
When setting a form's opacity should I use a decimal or double?