Some users are suggesting that my (C#) program should be able to run scripts after completing it’s job. This would be done through a command line to be input in my configuration dialog.
I’m no security expert, so I’m not sure if this acceptable in terms of security. Since the app runs with admin privileges (on Windows), wouldn’t that be a huge security risk? Someone could just modify the config files of my application to point to a potentially dangerous script, couldn’t they?
On the other hand, plenty of applications allow this, while requesting admin privileges, so I guess it must be ok, but I thought I’d better seek advice before opening wide security holes everywhere =)
Can I allow my application running with full privileges to launch user-specified scripts?
You can restrict access to your config in different ways – from obfuscating the config file to using NTFS permissions to limit access of non-admin accounts to it.