mirror of
https://github.com/winfsp/winfsp.git
synced 2025-04-23 00:43:00 -05:00
sys: IoCreateDeviceSecure: tighten down who can open the device
This commit is contained in:
parent
7dda01ef48
commit
14b1f75ac7
@ -24,7 +24,7 @@ DriverEntry(
|
|||||||
/* create the file system control device objects */
|
/* create the file system control device objects */
|
||||||
UNICODE_STRING DeviceSddl;
|
UNICODE_STRING DeviceSddl;
|
||||||
UNICODE_STRING DeviceName;
|
UNICODE_STRING DeviceName;
|
||||||
RtlInitUnicodeString(&DeviceSddl, L"" DRIVER_SDDL);
|
RtlInitUnicodeString(&DeviceSddl, L"" DEVICE_SDDL);
|
||||||
RtlInitUnicodeString(&DeviceName, L"\\Device\\" FSP_FSCTL_DISK_DEVICE_NAME);
|
RtlInitUnicodeString(&DeviceName, L"\\Device\\" FSP_FSCTL_DISK_DEVICE_NAME);
|
||||||
Result = IoCreateDeviceSecure(DriverObject,
|
Result = IoCreateDeviceSecure(DriverObject,
|
||||||
sizeof(FSP_FSCTL_DEVICE_EXTENSION), &DeviceName, FILE_DEVICE_DISK_FILE_SYSTEM, 0, FALSE,
|
sizeof(FSP_FSCTL_DEVICE_EXTENSION), &DeviceName, FILE_DEVICE_DISK_FILE_SYSTEM, 0, FALSE,
|
||||||
|
@ -12,7 +12,7 @@
|
|||||||
#include <winfsp/fsctl.h>
|
#include <winfsp/fsctl.h>
|
||||||
|
|
||||||
#define DRIVER_NAME "WinFsp"
|
#define DRIVER_NAME "WinFsp"
|
||||||
#define DRIVER_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)"
|
#define DEVICE_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)"
|
||||||
/* system and builtin administrators have full access */
|
/* system and builtin administrators have full access */
|
||||||
|
|
||||||
/* DEBUGLOG */
|
/* DEBUGLOG */
|
||||||
|
Loading…
x
Reference in New Issue
Block a user