a doubt

NTFSD
1

hi all,

in case of file attribute change i can get the new attributes to be set to a
file, but at that point if i want to save the older attributes how do I do
it in an FS filter driver?

One way I can think of is to use ZeQuery* functions to get the older ones,
but is this method correct? Or do I generate by own IRPS at that point to
get the info. I want a correct method to get this stuff right. Can someone
help?

B

2

Generate you own IRP and sedn it to th elower driver.
Zw functions create recursion which may cause deadlocks
and all other kind of unpleasant stuff.

L.