Skip to content

Move the yggdrasil DLL out of temp #291

@davidcumminsdatacom

Description

@davidcumminsdatacom

Describe the feature request

Find a better location than C:\Windows\Temp for the yggdrasil DLL. If no generally better location can be found, make the path configurable.

Background

The DLL is created and loaded by the code below in the Temp folder:
https://github.com/Unleash/yggdrasil/blob/main/dotnet-engine/Yggdrasil.Engine/NativeLoader.cs

This has caused us issues because we have to set execute permission on this file, and Windows Update tends to delete it, causing runtime errors next time we use Unleash. We can set permissions on the whole Temp folder, but it seems like a security hole.

Even if we didn't have this problem, there's the possibility that malware could overwrite the file to achieve escalation of privilege as it's in a known often writeable location.

Solution suggestions

  • Make the path configurable OR
  • Choose a more secure location

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

Status

ext. contrib. / awaiting response

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions