Prevent .net program from writing to disk

Question

How do I prevent my .net (C#) program from ever writing to disk?

Edit: There's a FileIOPermissionAttribute for anyone curious. This codeproject also shows a way.

Technically, you can't. Someone could inject IL or a native DLL to cause writes to disk. You could use Sandboxie though. — Polynomial, Nov 04 '11 at 00:16

score 2 · Answer 1 · answered Nov 04 '11 at 00:17

2

You can run it with an account that is not authorized to write to disk.

answered Nov 04 '11 at 00:17

Toto

56
2

You can have a Windows account that's not authorized to write to disk at all? How does it write its own settings? – svick Nov 04 '11 at 01:05

score 2 · Accepted Answer · answered Nov 04 '11 at 00:22

2

You can use caspol to ensure that the exe is not executed with "full trust", and limit the trust excluding that permission (FileIOPermission). However, if the exe is not designed and tested to run without full trust, it could completely fail to do anything.

answered Nov 04 '11 at 00:22

Marc Gravell

1,026,079
266
2,566
2,900

Prevent .net program from writing to disk

2 Answers2