logo标签列表

使用CAS进行IronPython沙箱化

c#ironpythoncassandbox
3
我正在尝试将IronPython集成到C#应用程序中，以进行脚本编写。我也希望这些脚本在一组安全策略下运行，限制其对文件系统/网络/敏感系统资源的访问。
研究表明，最受欢迎的方法是使用CAS。这很有效，并且不允许用户使用套接字、访问文件系统等。然而，当我尝试注入变量以与脚本进行交互时，每次访问某些参数时都会出现安全异常。这只发生在我定义的变量中。如果我使用标准.NET类型（如Dictionary），则可以正常工作。
我的代码:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Reflection;
using System.Security.Policy;
using System.Security.Permissions;
using System.Security;
using System.IO;
using Microsoft.Scripting.Hosting;
using IronPython.Hosting;
using System.Runtime.Remoting;
using System.Net;

namespace python_in_appdomain
{
    [Serializable]
    public class Whatever
    {
        public int i;
        public Whatever(int i)
        {
            this.i = i;
        }
    }

    class Program
    {
        static void Main(string[] args)
        {
            Remoting();
        }

        public static void Remoting()
        {
            AppDomainSetup setup = new AppDomainSetup();
            Assembly thisAssembly = Assembly.GetExecutingAssembly();
            setup.ApplicationBase = Path.GetDirectoryName(thisAssembly.Location);

            AssemblyName name = typeof(Program).Assembly.GetName();
            StrongName sn = new StrongName(
                new StrongNamePublicKeyBlob(name.GetPublicKey()),
                name.Name,
                name.Version
            );

            PermissionSet pset = new PermissionSet(PermissionState.None);
            pset.AddPermission(new SecurityPermission(SecurityPermissionFlag.Execution));
            pset.AddPermission(new ReflectionPermission(PermissionState.Unrestricted));

            setup.PartialTrustVisibleAssemblies = new[] { sn.Name + ", PublicKey=" + sn.PublicKey.ToString() };
            AppDomain domain = AppDomain.CreateDomain("Sandbox", AppDomain.CurrentDomain.Evidence, setup, pset, sn);

            String script = @"
d.Add('hello', 1)
w.i = 5
";

            Whatever w = new Whatever(4);
            Dictionary<string, int> d = new Dictionary<string,int>();

            ScriptRuntime py = Python.CreateRuntime(domain);
            ScriptEngine engine = py.GetEngine("py");
            ScriptScope scope = engine.CreateScope();
            scope.SetVariable("w", w);
            scope.SetVariable("d", d);

            int result;
            Console.WriteLine(w.i);
            d.TryGetValue("hello", out result);
            Console.WriteLine(result);
            Console.WriteLine("-----");

            try
            {
                engine.Execute(script, scope);
            }
            catch (Exception exc)
            {
                Console.WriteLine(exc.ToString());
            }

            w = scope.GetVariable<Whatever>("w");
            d = scope.GetVariable<Dictionary<string,int>>("d");

            Console.WriteLine("-----");
            Console.WriteLine(w.i);
            d.TryGetValue("hello", out result);
            Console.WriteLine(result);

        }
    }
}

在第55行注释掉"w.i=5"会使程序在受限安全设置下正常执行。在第47行将PermissionState设置为Unrestricted可以使脚本的两行都正常执行。以下是我收到的错误消息：

System.Security.SecurityException: Request failed.
   at System.Runtime.CompilerServices.RuntimeHelpers._CompileMethod(IRuntimeMethodInfo method)
   at System.Reflection.Emit.DynamicMethod.CreateDelegate(Type delegateType, Object target)
   at System.Dynamic.Utils.TypeExtensions.CreateDelegate(MethodInfo methodInfo, Type delegateType, Object target)
   at System.Linq.Expressions.Compiler.LambdaCompiler.CreateDelegate()
   at System.Linq.Expressions.Compiler.LambdaCompiler.Compile(LambdaExpression lambda, DebugInfoGenerator debugInfoGenerator)
   at System.Linq.Expressions.Expression`1.Compile()
   at System.Runtime.CompilerServices.CallSiteBinder.BindCore[T](CallSite`1 site, Object[] args)
   at System.Dynamic.UpdateDelegates.UpdateAndExecute2[T0,T1,TRet](CallSite site, T0 arg0, T1 arg1)
   at Microsoft.Scripting.Interpreter.DynamicInstruction`3.Run(InterpretedFrame frame)
   at Microsoft.Scripting.Interpreter.Interpreter.Run(InterpretedFrame frame)
   at Microsoft.Scripting.Interpreter.LightLambda.Run2[T0,T1,TRet](T0 arg0, T1 arg1)
   at IronPython.Compiler.PythonScriptCode.RunWorker(CodeContext ctx)
   at IronPython.Compiler.PythonScriptCode.Run(Scope scope)
   at IronPython.Compiler.RuntimeScriptCode.InvokeTarget(Scope scope)
   at IronPython.Compiler.RuntimeScriptCode.Run(Scope scope)
   at Microsoft.Scripting.SourceUnit.Execute(Scope scope, ErrorSink errorSink)
   at Microsoft.Scripting.Hosting.ScriptSource.Execute(ScriptScope scope)
   at Microsoft.Scripting.Hosting.ScriptEngine.Execute(String expression, ScriptScope scope)
   at Microsoft.Scripting.Hosting.ScriptEngine.Execute(String expression, ScriptScope scope)
   at python_in_appdomain.Program.Remoting() in C:\Users\dave\Documents\Visual Studio 2010\Projects\IronPythonTest\IronPythonTest\Program.cs:line 7
6
The action that failed was:
Demand
The type of the first permission that failed was:
System.Security.PermissionSet
The demand was for:
<PermissionSet class="System.Security.PermissionSet"
version="1"
Unrestricted="true"/>

The granted set of the failing assembly was:
<PermissionSet class="System.Security.PermissionSet"
version="1">
<IPermission class="System.Security.Permissions.ReflectionPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
version="1"
Unrestricted="true"/>
<IPermission class="System.Security.Permissions.SecurityPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
version="1"
Flags="Execution"/>
</PermissionSet>

The assembly or AppDomain that failed was:
Microsoft.Dynamic, Version=1.1.0.20, Culture=neutral, PublicKeyToken=7f709c5b713576e1
The method that caused the failure was:
Int32 Run(Microsoft.Scripting.Interpreter.InterpretedFrame)
The Zone of the assembly that failed was:
Internet
The Url of the assembly that failed was:
file:///C:/Users/dave/Documents/Visual Studio 2010/Projects/IronPythonTest/IronPythonTest/bin/Debug/Microsoft.Dynamic.DLL

Unhandled Exception: System.Security.SecurityException: Request failed.
   at System.Delegate.BindToMethodInfo(Object target, IRuntimeMethodInfo method, RuntimeType methodType, DelegateBindingFlags flags)
   at System.Delegate.CreateDelegate(Type type, MethodInfo method, Boolean throwOnBindFailure)
   at System.Dynamic.Utils.TypeExtensions.CreateDelegate(MethodInfo methodInfo, Type delegateType)
   at System.Runtime.CompilerServices.CallSite`1.MakeUpdateDelegate()
   at System.Runtime.CompilerServices.CallSite`1.GetUpdateDelegate(T& addr)
   at System.Runtime.CompilerServices.CallSite`1.GetUpdateDelegate()
   at System.Runtime.CompilerServices.CallSite`1.Create(CallSiteBinder binder)
   at System.Func`2.Invoke(T arg)
   at Microsoft.Scripting.Runtime.DynamicOperations.GetOrCreateSite[T](CallSiteBinder siteBinder, Func`2 factory)
   at Microsoft.Scripting.Runtime.DynamicOperations.GetOrCreateSite[T1,TResult](CallSiteBinder siteBinder)
   at Microsoft.Scripting.Runtime.DynamicOperations.ConvertTo[T](Object obj)
   at IronPython.Runtime.PythonContext.ScopeGetVariable[T](Scope scope, String name)
   at Microsoft.Scripting.Hosting.ScriptScope.GetVariable[T](String name)
   at Microsoft.Scripting.Hosting.ScriptScope.GetVariable[T](String name)
   at python_in_appdomain.Program.Remoting() in C:\Users\dave\Documents\Visual Studio 2010\Projects\IronPythonTest\IronPythonTest\Program.cs:line 8
3
   at python_in_appdomain.Program.Main(String[] args) in C:\Users\dave\Documents\Visual Studio 2010\Projects\IronPythonTest\IronPythonTest\Program.
cs:line 31

错误非常直接，它表示需要完全不受限制的访问来执行此类操作。有没有什么方法可以解决这个问题？为什么字典可行而变量不可行？我是否可以让IronPython将我的变量视为字典？我是否漏掉了一些非常明显的东西？
非常感谢您的帮助。
更新2012年12月21日
我继续尝试并想出了一个可行的解决方案。像这样创建AppDomain（使用相同的权限对象）可以使所有内容正常工作。
AppDomainSetup setup = new AppDomainSetup();
            setup.ApplicationBase = System.Environment.CurrentDirectory;
AppDomain domain = AppDomain.CreateDomain("IPyEngine", new Evidence(), setup, pset);

我不能完全理解其中的原因，但我可以看到我没有提供我的程序集的证明，也没有将任何程序集添加到信任列表中。在我确定自己没有犯任何愚蠢错误之前，我不想将其标记为答案。

1个回答
0

这很可疑：

The Zone of the assembly that failed was:
Internet
The Url of the assembly that failed was:
file:///C:/Users/dave/Documents/Visual Studio 2010/Projects/IronPythonTest/IronPythonTest/bin/Debug/Microsoft.Dynamic.DLL

我想知道这个文件是否有区域标识符。你能否检查文件属性，并在必要时解除其阻止？

我注意到了，但不知道这个阻止非常规操作的问题。我开放了所有DLL文件的阻止，但问题仍然存在。 - Dave M
我找到了其他的东西。请参见2012年12月21日的更新。 - Dave M
网页内容由stack overflow 提供, 点击上面的
可以查看英文原文，
原文链接