From: Jonas Pfenniger <zimbatm@...>
Date: 2006-12-12T06:00:57+09:00
Subject: Re: Questions about DRb and security

------=_Part_55481_27717225.1165870853990
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

2006/12/11, Pit Capitain <pit@capitain.de>:
>
> Jonas Pfenniger schrieb:
> > ...
> > As you see, this is very simple, but I'm wondering if this is enough.
> For
> > example, how does the client know the reference to [1,2,3]. Could it be
> > guessed in some way, so that it could bypass the AuthenticationProxy ?
>
> Jonas, I'm no DRb expert, but this client code can get access to the
> real object without authenticating itself:
>
>    @proxy = DRbObject.new( nil, URI )
>    class << @proxy
>      undef_method :instance_variable_get
>    end
>    @proxy.instance_variable_get("@object")  # => [1, 2, 3]
>
> It is necessary to undefine #instance_variable_get for the local @proxy
> object, so that the message is forwarded to the AuthenticationProxy on
> the server side.
>
> Regards,
> Pit


Good point Pit :) I guess that there are other security issues

------=_Part_55481_27717225.1165870853990--