mirror of
https://github.com/winfsp/winfsp.git
synced 2025-04-22 16:33:02 -05:00
sys: IoCreateDeviceSecure: tighten down who can open the device
This commit is contained in:
parent
7dda01ef48
commit
14b1f75ac7
@ -24,7 +24,7 @@ DriverEntry(
|
||||
/* create the file system control device objects */
|
||||
UNICODE_STRING DeviceSddl;
|
||||
UNICODE_STRING DeviceName;
|
||||
RtlInitUnicodeString(&DeviceSddl, L"" DRIVER_SDDL);
|
||||
RtlInitUnicodeString(&DeviceSddl, L"" DEVICE_SDDL);
|
||||
RtlInitUnicodeString(&DeviceName, L"\\Device\\" FSP_FSCTL_DISK_DEVICE_NAME);
|
||||
Result = IoCreateDeviceSecure(DriverObject,
|
||||
sizeof(FSP_FSCTL_DEVICE_EXTENSION), &DeviceName, FILE_DEVICE_DISK_FILE_SYSTEM, 0, FALSE,
|
||||
|
@ -12,7 +12,7 @@
|
||||
#include <winfsp/fsctl.h>
|
||||
|
||||
#define DRIVER_NAME "WinFsp"
|
||||
#define DRIVER_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)"
|
||||
#define DEVICE_SDDL "D:P(A;;GA;;;SY)(A;;GA;;;BA)"
|
||||
/* system and builtin administrators have full access */
|
||||
|
||||
/* DEBUGLOG */
|
||||
|
Loading…
x
Reference in New Issue
Block a user