How to support ACL

NTFSD
1

Hello,

I’m a file system develop newbie. Recently I need to do some work to make our file system support acl(Access List Control).
I have searched the web, MSDN and IFS DDK document. Now I know that I have to process the IRP_MJ_QUERY_SECURITY
and the IRP_MJ_SET_SECURITY request. But when I right click a file or folder, the security tab does not exist. Could anyone give
me some guide here.

Thanks

好玩贺卡等你发，邮箱贺卡全新上线！
http://card.mail.cn.yahoo.com/

2

Googling for "right click" "security tab does not exist" brings the following
in a second link:

"If the 'Security' tab does not exist, ... Click on the 'Tools' menu and select
'Folder Options'. In the new window, choose 'View' and search for the
'Use simple file sharing' option (it is usually last). Make sure it is not
checked, then press 'OK'."

Can it be as simple as that?

Note that, as another link cautions, "The option to disable simple file sharing
will not be available on a system running XP Home Edition."

----- Original Message -----
From: 光凯 张
To: Windows File Systems Devs Interest List
Sent: Sunday, April 12, 2009 6:17 AM
Subject: [ntfsd] How to support ACL

Hello,

I'm a file system develop newbie. Recently I need to do some work to make our file system support acl(Access List Control).
I have searched the web, MSDN and IFS DDK document. Now I know that I have to process the IRP_MJ_QUERY_SECURITY
and the IRP_MJ_SET_SECURITY request. But when I right click a file or folder, the security tab does not exist. Could anyone give
me some guide here.

Thanks

好玩贺卡等你发，邮箱贺卡全新上线！

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
OSR Seminars – OSR

To unsubscribe, visit the List Server section of OSR Online at ListServer/Forum

3

光凯 张 wrote:

Hello,

I’m a file system develop newbie. Recently I need to do some work to
make our file system support acl(Access List Control).
I have searched the web, MSDN and IFS DDK document. Now I know that I
have to process the IRP_MJ_QUERY_SECURITY
and the IRP_MJ_SET_SECURITY request. But when I right click a file or
folder, the security tab does not exist. Could anyone give
me some guide here.

Do you have the FILE_PERSISTENT_ACLS set for the file system attributes
in the IRP_MJ_QUERY_VOLUME_INFORMATION/FileFsAttributeInformation request?

Pete

Thanks

好玩贺卡等你发，邮箱贺卡全新上线！
http:</http:>

NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

–
Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com
866.263.9295

4

As Peter said, FILE_PERSISTENT_ACLS is a key point.
Also ACLs should also be checked in IRP_MJ_CREATE and IRP_MJ_SET_INFORMATION(rename or delete).

Regards
Haibo