CLR v4 Security Policy Roundup

Over the last few weeks we’ve been taking a look at the updates to the CLR security policy system in the v4 release of the .NET Framework.  Here’s a quick index of those topics:

• Overview
  • Security Policy in the v4 CLR
  • Sandboxing in .NET 4.0
• Updating code to work with the new model
  • Implicit uses of CAS policy part 1 (Assembly.Load with Evidence, AppDomain creation with Evidence)
  • Implicit uses of CAS policy part 2 (loading assemblies from remote sources)
  • Explicit uses of CAS policy (APIs such as SecurityManager which directly use CAS policy)
• Temporarily re-enabling CAS policy during migration
  • The NetFx40_LegacySecurityPolicy config file switch