Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Trying to set OWNER_SECURITY_INFORMATION using FltSetSecurityObject(), returns STATUS_INVALID_OWNER

RashmiRashmi Member Posts: 4
edited April 2019 in NTFSD

From some posts, I learnt that we need to restore the priviliges of the thread before setting an owner.
I followed http://www.osronline.com/article.cfm^article=23.htm to restore the privileges. But I am seeing STATUS_ACCESS_VIOLATION for routine NtAdjustPrivilegesToken().

So my question is
1) Is restoring the privileges is the solution to owner to security object?
2 ) If yes, how do I achieve that? Because I am seeing STATUS_ACCESS_VIOLATION for the routine NtAdjustPrivilegesToken()

Comments

  • ntdeveloper31ntdeveloper31 Member Posts: 23

    Just posting in case someone comes across this very issue.

    This needs to be done in the context of system worker thread. FltAllocateGenericWorkItem, FltQueueGenericWorkItem etc. family of functions are your friends.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Kernel Debugging 30 Mar 2020 OSR Seminar Space
Developing Minifilters 20 Apr 2020 OSR Seminar Space & ONLINE
Writing WDF Drivers 11 May 2020 OSR Seminar Space & ONLINE
Internals & Software Drivers 28 Sept 2020 Dulles, VA