Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTDEV

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

how to make my driver-created device accessible without privileged permission

PeterLeePeterLee Member Posts: 6

Hi all,

I have built a NDIS protocol driver which created a device named NDIS-SAMPLE.

Unfortunately, this device is only accessible (Open, Close, Ioctl, Read and Write operations) by Admin permission.

How can this device be accessible by normal users?

Any suggestions are welcome!

Comments

  • CaptainFlintCaptainFlint Member Posts: 73

    How exactly do you create the device? Unfortunately, I'm not much into the driver development, but I've seen a similar issue in one driver, and it was fixed by replacing the IoCreateDevice() call with IoCreateDeviceSecure() and an appropriate SDDL string, defining the permissions.

  • PeterLeePeterLee Member Posts: 6

    @CaptainFlint said:
    How exactly do you create the device? Unfortunately, I'm not much into the driver development, but I've seen a similar issue in one driver, and it was fixed by replacing the IoCreateDevice() call with IoCreateDeviceSecure() and an appropriate SDDL string, defining the permissions.

    Hi CaptainFlint, I create the device by using IoCreateDevice() function

  • CaptainFlintCaptainFlint Member Posts: 73

    Well, MSDN says:

    IoCreateDevice can only be used to create an unnamed device object, or a named device object for which a security descriptor is set by an INF file. Otherwise, drivers must use IoCreateDeviceSecure to create named device objects.

    I guess, you need to follow one of these two ways to apply the proper permissions.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Writing WDF Drivers 24 January 2022 Live, Online
Internals & Software Drivers 7 February 2022 Live, Online
Kernel Debugging 21 March 2022 Live, Online
Developing Minifilters 23 May 2022 Live, Online