Re: Running Win32.net apps on Network Share

From: Marcelo J. Birnbach (mbirnbac@online.microsoft.com)
Date: 02/14/03

  • Next message: Joe Kaplan: "How can I tell if an X509 cert is valid for encryption using the X509Certificate class?" 
    From: "Marcelo J. Birnbach" <mbirnbac@online.microsoft.com>
Date: Fri, 14 Feb 2003 14:34:53 -0800

    Hi Tom,

    What you are doing by that is opening a HUGE security hole. You are allowing
    any code coming from the Intranet to call unmanaged call. For example
    through PInvoke call "format.com c:"

    I don't understand why you are saying that the method you are proposing is
    better than strongly name the assembly and give to its key the desired
    level.

    Anyway, any simple application should be able to run from the Intranet since
    the only needed permission to run is SecurityPermission.Execution

    Console.WriteLine doesn't require any permission.

    Thanks,
    Marcelo

    "Tom Cuscino" <tomcu@gasullivan.com> wrote in message
    news:eOpwyYH1CHA.1624@TK2MSFTNGP10...
    > I have found the smallest change that can be made in order to run a
    > donothing Win32.Net app (like HelloWorld) on a network share.
    >
    > 1. Make a duplicate of the permission set LocalIntranet
    > 2. Go into Change Permissions on the duplicate, select Security, and
    click
    > Properties
    > 3. Check the Box called "Allow calls to Unmanaged Assemblies"
    > 4. Right click the Code group named LocalIntranet_Zone, go to properties,
    > the Permission set tab, and repoint to the newly created permission set.
    >
    > This is definitely better than granting fulltrust to the assembly.
    >
    > Tom Cuscino
    > tomcu@gasullivan.com
    >
    >

    Relevant Pages

    • RE: Adding permissions to predefined permission sets
      ... I've created a permission set called LocalIntranetWithFileIO (the ... I've changed the code group 1.2 (Intranet) to have the permission set ... it appears that everytime I change the security at any level (using ... mscorlib, Version=1.0.5000.0, Culture=neutral, ...
      (microsoft.public.dotnet.security)
    • Re: Adding permissions to predefined permission sets
      ... > into the security policy files and manually edit the XML. ... > tried to give either the intranet and/or the internet permission set the ...
      (microsoft.public.dotnet.security)