Jump to navigation

Poupou's Corner of the Web

Looking for perfect security? Try a wireless brick.
Otherwise you may find some unperfect stuff here...

Weblog

NRobot - code your own, like Asimov did

Stuart has released version 0.20 of NRobot. This is the first version to use a sandbox to execute the bots (which are limited to the Internet permission set, minus the ability to call back "home"). So now instead of specific tests and unit tests I can now produce my own bad robots ;-).

Although limited support (but enough for NRobot needs) for sandboxing is present in Mono's SVN, the NRobot sandboxing feature won't work today (but you can still enjoy it using the --insecure switch of NRobot assembly). The first (of probably many) problem is that Mono isn't shipping any policy files, so the Internet NamedPermissionSet doesn't map to anything useful (in fact you'll get an exception about this).

Anyway I hope to fix most problems NRobot exhibit on Mono very soon as this will make a good test for the work I've been doing (and somehow I don't feel my own tests are enough ;-). Note that this won't make executing non-trusted bots secure because very few permissions are present (i.e. enforced) in the class librairies. This will be true for a long time (i.e. until they are all present, audited and a bunch of other things) but each passing day should make it a little better - and more visual.

Thanks Stuart and good luck. We wish you, and your family, well!

P.S. On a more positive note both the Gtk# and the System.Windows.Forms versions of NRobot works well with Mono :-).


5/20/2005 19:35:01 | Comments

The views expressed on this website/weblog are mine alone and do not necessarily reflect the views of my employer.