mirror of
				https://github.com/winfsp/winfsp.git
				synced 2025-10-30 19:48:38 -05:00 
			
		
		
		
	sys: IoCreateDeviceSecure: tighten down who can open the device
This commit is contained in:
		| @@ -24,7 +24,7 @@ DriverEntry( | ||||
|     /* create the file system control device objects */ | ||||
|     UNICODE_STRING DeviceSddl; | ||||
|     UNICODE_STRING DeviceName; | ||||
|     RtlInitUnicodeString(&DeviceSddl, L"" DRIVER_SDDL); | ||||
|     RtlInitUnicodeString(&DeviceSddl, L"" DEVICE_SDDL); | ||||
|     RtlInitUnicodeString(&DeviceName, L"\\Device\\" FSP_FSCTL_DISK_DEVICE_NAME); | ||||
|     Result = IoCreateDeviceSecure(DriverObject, | ||||
|         sizeof(FSP_FSCTL_DEVICE_EXTENSION), &DeviceName, FILE_DEVICE_DISK_FILE_SYSTEM, 0, FALSE, | ||||
|   | ||||
| @@ -12,7 +12,7 @@ | ||||
| #include <winfsp/fsctl.h> | ||||
|  | ||||
| #define DRIVER_NAME                     "WinFsp" | ||||
| #define DRIVER_SDDL                     "D:P(A;;GA;;;SY)(A;;GA;;;BA)" | ||||
| #define DEVICE_SDDL                     "D:P(A;;GA;;;SY)(A;;GA;;;BA)" | ||||
|     /* system and builtin administrators have full access */ | ||||
|  | ||||
| /* DEBUGLOG */ | ||||
|   | ||||
		Reference in New Issue
	
	Block a user