sys: IoCreateDeviceSecure: tighten down who can open the device

This commit is contained in:
Bill Zissimopoulos 2015-11-21 16:49:16 -08:00
parent 7dda01ef48
commit 14b1f75ac7
2 changed files with 2 additions and 2 deletions

View File

@ -24,7 +24,7 @@ DriverEntry(
/* create the file system control device objects */
UNICODE_STRING DeviceSddl;
UNICODE_STRING DeviceName;
RtlInitUnicodeString(&DeviceSddl, L"" DRIVER_SDDL);
RtlInitUnicodeString(&DeviceSddl, L"" DEVICE_SDDL);
RtlInitUnicodeString(&DeviceName, L"\\Device\\" FSP_FSCTL_DISK_DEVICE_NAME);
Result = IoCreateDeviceSecure(DriverObject,
sizeof(FSP_FSCTL_DEVICE_EXTENSION), &DeviceName, FILE_DEVICE_DISK_FILE_SYSTEM, 0, FALSE,

View File

@ -12,7 +12,7 @@
#include <winfsp/fsctl.h>
#define DRIVER_NAME "WinFsp"
#define DRIVER_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)"
#define DEVICE_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)"
/* system and builtin administrators have full access */
/* DEBUGLOG */