sys: disallow creating a ReadOnly and DeleteOnClose file

This commit is contained in:
Bill Zissimopoulos 2016-12-18 21:50:11 -08:00
parent 33e8b5df04
commit 3adcf70748

View File

@ -189,6 +189,10 @@ NTSTATUS FspFileSystemCreateCheck(FSP_FILE_SYSTEM *FileSystem,
ParentDesiredAccess = FILE_ADD_SUBDIRECTORY;
else
ParentDesiredAccess = FILE_ADD_FILE;
if ((Request->Req.Create.FileAttributes & FILE_ATTRIBUTE_READONLY) &&
(Request->Req.Create.CreateOptions & FILE_DELETE_ON_CLOSE))
Result = STATUS_CANNOT_DELETE;
else
Result = FspAccessCheckEx(FileSystem, Request, TRUE, AllowTraverseCheck,
ParentDesiredAccess,
&GrantedAccess, PSecurityDescriptor);