What is security policy?

What is security policy?

Rating:

Security policy is a set of rules followed by common language runtime (CLR) while determining the permissions to be granted to code. CLR examines the characteristics of the code for determining the access that the code can have to resources. Security policy defines several code groups and associates them with a set of permissions. Although the default security policy is applicable for most situations, administrators can customize or modify the security policy of organizations. CLR grants permissions to assemblies and application domains on the basis of the security policy. The .NET Framework provides four security policy levels that are used to compute the permission grant of an assembly or application domain. Each security policy level has its own hierarchy of permission sets and code groups. To compute the allowed permission set, CLR intersects the permission sets that are granted to an assembly from each level. Following are the four security policy levels, in hierarchical order, provided by .NET Framework security:

1. Enterprise policy
2. Machine policy
3. User policy
4. Application domain policy

Rating: