RE: Event Log & Security

From: Michael Green (mikegreonline@microsoft.com)
Date: 10/05/02


From: mikegreonline@microsoft.com (Michael Green)
Date: Sat, 05 Oct 2002 00:31:16 GMT


Craig,

I'm looking into this issue and will get back to you asap.

Thanks,

Michael Green
Microsoft Developer Support
--------------------
| From: "Craig Wagner" <craig_d_wagner@yahoo.com>
| Subject: Event Log & Security
| Date: Wed, 2 Oct 2002 09:00:27 -0700
| Lines: 26
| Organization: Communi(k), Inc.
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
| Message-ID: <#rTPryiaCHA.1308@tkmsftngp12>
| Newsgroups: microsoft.public.dotnet.framework.aspnet.security
| NNTP-Posting-Host: 198.36.173.1
| Path: cpmsftngxa09!cpmsftngxa08!tkmsftngp01!tkmsftngp12
| Xref: cpmsftngxa09 microsoft.public.dotnet.framework.aspnet.security:2431
| X-Tomcat-NG: microsoft.public.dotnet.framework.aspnet.security
|
| I've read several threads talking about the EventLog.SourceExists method
and
| having to give permissions to the account under which the ASP.NET helper
| process is running.
|
| I thought I'd try a different approach, but after reading all the docs I
| don't understand why this isn't working:
|
| RegistryPermission permit = new RegistryPermission(
| RegistryPermissionAccess.AllAccess,
| @"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog" );
| permit.Assert();
| if (isAppEventLogEnabled && EventLog.SourceExists(appEventSource,
| appEventLogServerName))
| EventLog.WriteEntry(appEventSource, asMsg, aEntryType, (int)aeEvent);
| RegistryPermission.RevertAssert();
|
| The first two lines execute without throwing any error, but I continue to
| get a SecurityException when it executes the EventLog.SourceExists.
|
| As I said, I've read the threads and I know the suggested solution(s), so
I
| don't need assistance on how to get this to work, I need to understand why
| it doesn't.
|
| Thanks.
|
|
|



Relevant Pages

  • [NEWS] DB2 on iSeries Stored Procedures Vulnerability
    ... Beyond Security would like to welcome Tiscali World Online ... This vulnerability lets an otherwise limited user execute iSeries ... This vulnerability lets a user execute REXX scripts. ... CL programs sources are kept in Source files. ...
    (Securiteam)
  • [Full-Disclosure] Flaws security feature of SP2
    ... Author: Jürgen Schmidt, heise Security ... Windows Explorer does not update zone information ... When a user tries to execute a file downloaded from the ... files from archives with a ZoneID greater than or equal ...
    (Full-Disclosure)
  • RE: [Full-Disclosure] Flaws security feature of SP2
    ... Flaws security feature of SP2 ... Windows Explorer does not update zone information ... When a user tries to execute a file downloaded from the ... files from archives with a ZoneID greater than or equal ...
    (Full-Disclosure)
  • Re: System.Security.SecurityException was unhandled
    ... assembly actually has the permission in question. ... Try and find the sorce of the security permission error, ... setting was done on both versions 1.1 and 2.0 .NET framework. ... When I execute the application I received and error message. ...
    (microsoft.public.dotnet.security)
  • Re: Mac viruses are easy to make...
    ... "Mac vs. Windows Security: Mac Benefits Explained" ... The only time it is checked is when these priv levels are attempting to execute at higher privs. ... This outlines several BUFFER OVERFLOW scenarios that involved AFP, which means that the system was REMOTELY VULNERABLE. ...
    (comp.sys.mac.advocacy)