Summary

for RuBoard

Because the .NET Framework assigns trust to code and not users, evidence about code is a fundamental piece of .NET Framework security. Evidence can be viewed as the credentials for .NET Framework code. Generally, the same .NET application will have the same evidence, regardless of which user executes it.

Evidence is applied to assemblies and app domains. The Common Language Runtime provides default evidence when assemblies are loaded. Hosts can provide evidence for both assemblies and app domains, and assemblies can also provide evidence about themselves . However, assembly evidence does nothing unless security policy recognizes and uses it. Unmanaged hosts can only provide evidence regarding app domains, while managed hosts can provide evidence for app domains and assemblies. Managed hosts can utilize any of the APIs listed in Table 5.1.

As shown in Table 5.2, there are numerous different kinds of default evidence, all of which are located in the System.Security.Policy namespace. However, any object can be used as evidence. Again, though, nondefault evidence types must be recognized by security policy to have an impact.

for RuBoard