Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Home NTFSD

Before Posting...

Please check out the Community Guidelines in the Announcements and Administration Category.

More Info on Driver Writing and Debugging


The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.


Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/


Full virtualization for jobs

robotsdontdierobotsdontdie Member Posts: 2

Hello
I'm looking to start a project where we want to fully virtualize all file system access for processes within a particular job. Somewhat similar to containerization, but the file data served would be dynamic (in our case retrieving remote files) rather than static container images.

Would this be something possible with minifilters?

Specifically, would minifilters be able to virtualize drives that otherwise don't exist on my system? For example, even if I do not have a T: drive, I would need a T: to appear to specific processes. It seems that all the examples I find are minifilters attaching to existing drives.

Thanks!

Comments

  • rod_widdowsonrod_widdowson Member - All Emails Posts: 1,258

    Sounds to me like you writing a file system. And tbh that would be a lot easier for the scope you have described.

    The bit you describe (working from dos device T:) is the easy bit. You can do it properly (surface a device, make sure that only your recogniser can mount it and then map a dos device, or do it with mirrors and reparse points…

    But won’t the cloud mini filter do what you need?

  • robotsdontdierobotsdontdie Member Posts: 2

    Thanks for the reply.

    The part I'm still unsure about is how to make that mount specific to a process/job. Even if only a specific process can do the mount, how does this prevent other processes from seeing it? If I run 2 processes like this, how are they able to both mount a T: that is virtualized differently for each?

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. Sign in or register to get started.

Upcoming OSR Seminars
OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
Kernel Debugging 16-20 October 2023 Live, Online
Developing Minifilters 13-17 November 2023 Live, Online
Internals & Software Drivers 4-8 Dec 2023 Live, Online
Writing WDF Drivers 10-14 July 2023 Live, Online