Re: security issues with a dll

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance




"William DePalo [MVP VC++]" <willd.no.spam@xxxxxxxx> wrote in message
news:uPHkoP3XHHA.4552@xxxxxxxxxxxxxxxxxxxxxxx
"Dave Cullen" <nospam@xxxxxxxx> wrote in message
news:45EC93E9.CC1165C3@xxxxxxxxxxx
Ugh. Thanks, but that's a tad more complicated than I'm comfortable
with.

Such is life. Security is not pretty. :-)

Isn't there a way to "register" a dll (I remember seeing that term)
that'll make it available to all users?

No. You are facing in issue of trust with respect to a user, not a stretch
of code. Your mission is to get the code that invokes some function in
that DLL to execute in another user's context.


Technically, you can register a COM dll into Component Services (thus
rendering it as a COM+ object). Component Services allow one to configure
access such that the dll is available to all users (or a subset of users).

Brian


.



Relevant Pages

  • Re: IIS Stops Responding -- IISState Info Included
    ... After I added the dll to Component Services, ... Unattended Execution and Retain in Memory options. ... which also warned against using global variables in a BAS module. ...
    (microsoft.public.inetserver.iis)
  • Re: IIS Stops Responding -- IISState Info Included
    ... > After I added the dll to Component Services, ... > Unattended Execution and Retain in Memory options. ... which also warned against using global variables in a BAS module. ...
    (microsoft.public.inetserver.iis)
  • Re: Using MTA COM+ Objects in ASP Pages
    ... Even if i register using regsvr32 or Component Services Menu, ... DLL seem to work for sometime. ... Our MTA Component is an ActiveX Server Componet with Free Threaded ...
    (microsoft.public.vc.atl)
  • Re: Is it possible to have Component services create a new host each time an object is created
    ... setting the pool size to a huge value is possible, but not a very nice solution. ... And even if COM+ did support a REGCLS_SINGLEUSE option, the solution would be the same as you already created yourself - a new dllhost surrorage is loaded for each activation which in turn loads and activates your DLL. ... I'm trying to duplicate this behavior with Component Services. ... ActiveX EXE COM object and this creates an instance of the COM dll ...
    (microsoft.public.dotnet.framework.component_services)
  • Re: COM DLL works fine in C# but not when using Remoting
    ... TestLib is an RCW for a COM DLL. ... I have used .NET Wizard to TRUST the RCW. ... Security for Local Intranet to "Full Trust". ...
    (microsoft.public.dotnet.framework.remoting)