Re: xPLExec

[Tom Van den Panhuyzen <tomvdp@xxxxxxxxx>]

Hi Mal,
I'll give it a go!
Will use it for ftp-ing a file instead of doing this from inside xplhal
script.
The executable is a command shell. Hopefully I can "allow" that ?
And
thereby render your protection useless ;-)
Cheers
Tom

On 10/30/05, Mal Lansell <mal@xxxxxxx> wrote:
>
> xPLExec, an application to allow an executable file to be run in
> response to an xPL message is now available for download from:
>
> http://www.xplmonkey.com/xplexec.html
>
> After considering the security issues at length, I finally decided to
go
> for a simple config file containing the list of permitted
applications.
> I decided that encryption was pointless in this case - anyone with
> sufficient access to play with the config file will surely be able to
> run any executable directly.
>
> To prevent the list being modified by other rogue xPL messages
however,
> it is not presented in xPLHal. Instead, I wrote a simple configuration
> program (xPLExecConfig.exe) to allow the selection of permitted
> executables. This is installed in the same folder as xPLExec.exe.
>
> I wanted to place a shortcut to xPLExecConfig in the programs folder,
> but for some reason Visual Studio's setup wouldn't do it - it always
> pointed to xPLExec instead. This means you have to locate the config
> program by hand, unfortunately.
>
> Mal
>
>
> xPL Links: http://www.xplproject.org.uk http://www.xplhal.com
> http://www.xpl.myby.co.uk
> To Post a Message: ukha_xpl@xxxxxxx
> To Subscribe: ukha_xpl-subscribe@xxxxxxx
> To Unsubscribe: ukha_xpl-unsubscribe@xxxxxxx
>
>
>
> SPONSORED LINKS
>   Protocol analyzer<http://groups.yahoo.com/gads?t=ms&k=Protocol+analyzer&w1=Protocol+analyzer&w2=Protocol+converter&w3=Sip+protocol&w4=Tcp&w5=Protocol+analysis&w6=Protocol&c=6&s=111&.sig=QulmGKu5OpHgigyaWFXqqA>
Protocol
> converter<http://groups.yahoo.com/gads?t=ms&k=Protocol+converter&w1=Protocol+analyzer&w2=Protocol+converter&w3=Sip+protocol&w4=Tcp&w5=Protocol+analysis&w6=Protocol&c=6&s=111&.sig=_Gav_2JNLbgwjsCn8RqM-w>
Sip
> protocol<http://groups.yahoo.com/gads?t=ms&k=Sip+protocol&w1=Protocol+analyzer&w2=Protocol+converter&w3=Sip+protocol&w4=Tcp&w5=Protocol+analysis&w6=Protocol&c=6&s=111&.sig=d2G6YVkW-P5WBFmpuWQ3Zw>
> Tcp<http://groups.yahoo.com/gads?t=ms&k=Tcp&w1=Protocol+analyzer&w2=Protocol+converter&w3=Sip+protocol&w4=Tcp&w5=Protocol+analysis&w6=Protocol&c=6&s=111&.sig=9xqmZjMntiOfVEPLIpwKUg>
Protocol
> analysis<http://groups.yahoo.com/gads?t=ms&k=Protocol+analysis&w1=Protocol+analyzer&w2=Protocol+converter&w3=Sip+protocol&w4=Tcp&w5=Protocol+analysis&w6=Protocol&c=6&s=111&.sig=j5RxaJ5TSW2NTgWhIna4qQ>
> Protocol<http://groups.yahoo.com/gads?t=ms&k=Protocol&w1=Protocol+analyzer&w2=Protocol+converter&w3=Sip+protocol&w4=Tcp&w5=Protocol+analysis&w6=Protocol&c=6&s=111&.sig=OPnkI6GadMASTgKewyeqDQ>
>  ------------------------------
> YAHOO! GROUPS LINKS
>
>
>    - Visit your group "ukha_xpl<http://groups.yahoo.com/group/ukha_xpl>"
>    on the web.
>     - To unsubscribe from this group, send an email to:
>   
ukha_xpl-unsubscribe@xxxxxxx<ukha_xpl-unsubscribe@xxxxxxx?subject=Unsubscribe>
>     - Your use of Yahoo! Groups is subject to the Yahoo! Terms of
>    Service <http://docs.yahoo.com/info/terms/>.
>
>
>  ------------------------------
>


[Non-text portions of this message have been removed]