I want to filter access from remote.
For example, When someone try to access shared-folder of nt-server, the
i/o request must be denied.
I need to hook IoCreateFile, is it right?
Then, How should i hook IoCreateFile.
Some code would be a great help.
Regards.
mynam.
Hooking system calls is wrong.
You should write a filter driver. You will get
notified of opens via IRP_MJ_CREATE messages. You
will get these regardless of the function used to open
the file (IoCreateFile, ZwCreateFile).
— mynam wrote:
> I want to filter access from remote.
> For example, When someone try to access
> shared-folder of nt-server, the
> i/o request must be denied.
>
> I need to hook IoCreateFile, is it right?
> Then, How should i hook IoCreateFile.
>
> Some code would be a great help.
>
> Regards.
> mynam.
>
> —
> Questions? First check the IFS FAQ at
> https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
xxxxx@lists.osr.com
__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/