I think mr. “shark marian” aka ding hao ought to take this discussion over
to the ntfsd list 
Tony’s suggestion appeared to require the least effort, and was most likely
to fit within the OP’s skill set.
=====================
Mark Roddy
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Mats PETERSSON
Sent: Wednesday, December 15, 2004 10:53 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] About Hoook System Service?
Any reason you can’t do this with a file-system filter driver? It sounds
like the right place to protect files and directories…
–
Mats
-------- Notice --------
The information in this message is confidential and may be legally
privileged. It is intended solely for the addressee. Access to this
message by anyone else is unauthorized. If you are not the intended
recipient, any disclosure, copying or distribution of the message, or any
action taken by you in reliance on it, is prohibited and may be unlawful.
If you have received this message in error, please delete it and contact the
sender immediately. Thank you.
xxxxx@lists.osr.com wrote on 12/15/2004 03:46:09 PM:
hello,
i am just want to disable the operation of my critical file or
directory,and protect my file and diretcory,so in the hook system
service,such as the ZwOpenFile,if the operation is to my file,how to
disable it?just this.
best regards
免费下载 MSN Explorer: http://explorer.msn.com/lccn/
Questions? First check the Kernel Driver FAQ at http://www.
osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@3dlabs.com To
unsubscribe send a blank email to xxxxx@lists.osr.com
ForwardSourceID:NT00009876
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to $subst(‘List.Name’) as:
$subst(‘Recip.EmailAddr’) To unsubscribe send a blank email to
$subst(‘Email.UnSub’)