How is this more risky than running the code you are actually testing?  Isn't
the real code and the test code written by the same group?

--- Martin Aliger <[EMAIL PROTECTED]> wrote:
> Hi all,
> 
> I found serious security problem. My build server, which use NAnt
> internally, runs as windows service (as all build servers I know runs). This
> service runs as priviliged user. Nothing wrong with that unless you run
> test-cases with NUnit. It runs user code, which could contain maligious
> tests... It is not big problem for us, since I trust my
> coleagues, but it could be problem in some scenarios.
> 
> What about limit somehow permitions in NUnitTask? Or is something done in
> NUnit itself?
> 
> Regards,
> Martin
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> nant-developers mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/nant-developers



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
nant-developers mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/nant-developers

Reply via email to