Hi all,
I’ve been trying to get my implementation of
MRxQuerySdInfo to work correctly… so far,
when I call NtQuerySecurityObject() directly, I’m
getting back STATUS_SUCCESS, and the following,
self relative security descriptor.
f8b05cbc 01 00 04 80 80 00 00 00 9c 00 00 00 00 00 00 00
f8b05ccc 14 00 00 00 02 00 6c 00 04 00 00 00 00 00 18 00
f8b05cdc ff 01 1f 00 01 02 00 00 00 00 00 05 20 00 00 00
f8b05cec 20 02 00 00 00 00 14 00 af 00 12 00 01 01 00 00
f8b05cfc 00 00 00 05 0b 00 00 00 00 00 24 00 ff 01 1f 00
f8b05d0c 01 05 00 00 00 00 00 05 15 00 00 00 fc e3 15 31
f8b05d1c 79 e3 fc 53 43 17 0a 32 eb 03 00 00 00 00 14 00
f8b05d2c ff 01 1f 00 01 01 00 00 00 00 00 05 12 00 00 00
f8b05d3c 01 05 00 00 00 00 00 05 15 00 00 00 fc e3 15 31
f8b05d4c 79 e3 fc 53 43 17 0a 32 eb 03 00 00 01 05 00 00
f8b05d5c 00 00 00 05 15 00 00 00 fc e3 15 31 79 e3 fc 53
f8b05d6c 43 17 0a 32 01 02 00 00
GetSecurityDescriptorLength() agrees with the
length returned by NtQuerySecurityObject(),
and IsValidSecurityDescriptor() returns true,
and MakeAbsoluteSD() can successfully
process the security descriptor.
However, when I use the Win32 functions,
GetNamedSecurityInfo() or GetSecurityInfo(),
I get back S_FALSE as the return value, and
GetLastError() is also set to S_FALSE.
Anybody have any clue what might be causing
Win32 to go up in flames?
Also, explorer doesn’t show the security tab for
my file system (and in fact my MRxQuerySdInfo
function is never called by explorer when
displaying properties on a file.)
I do set the FILE_PERSISTENT_ACLS bit in the
FileFsAttributeInformation.
Any one have any clues what explorer is looking
for here before it displays the page?
Thanks,
Joseph
> Also, explorer doesn’t show the security tab for
my file system (and in fact my MRxQuerySdInfo
function is never called by explorer when
displaying properties on a file.)
AFAIK Neal Christiansen wrote that the shell
just tests the name of the file system for “NTFS”,
otherwise it will not show the security page.
A newer version of the shell will test the
FILE_PERSISTENT_ACLS bit, but
it is probably not known if it will be in Longhorn
or in some XP service pack too.
L.
Ladislav Zezula wrote:
> Also, explorer doesn’t show the security tab for
> my file system (and in fact my MRxQuerySdInfo
> function is never called by explorer when
> displaying properties on a file.)
AFAIK Neal Christiansen wrote that the shell
just tests the name of the file system for “NTFS”,
otherwise it will not show the security page.
A newer version of the shell will test the
FILE_PERSISTENT_ACLS bit, but
it is probably not known if it will be in Longhorn
or in some XP service pack too.
Yikes; or more acurately ‘AAAAAAAAAAARGGGGGGHHHH’
However, I set my filesystem name to NTFS, and
still don’t get the security tab-- nor does
explorer ever call my MRxQuerySdInfo function.
Is there something else that maybe explorer is looking
for?
Thanks,
Joseph
> > AFAIK Neal Christiansen wrote that the shell
> just tests the name of the file system for “NTFS”,
> otherwise it will not show the security page.
We have a filesystem *not* named “NTFS” which *does* display the security
tab. Make sure that FILE_PERSISTENT_ACLS is set in return to
FileFsAttributeInformation. And that you correctly handle the
IRP_MJ_QUERY_SECURITY dispatch.
Have you tried cacls/xcacls?
Only to run the Security group of IFSTests, your FSD would need to fake
itself as “NTFS”.
Vipul.
“Joseph Galbraith” wrote in message news:xxxxx@ntfsd…
> Ladislav Zezula wrote:
> >> Also, explorer doesn’t show the security tab for
> >> my file system (and in fact my MRxQuerySdInfo
> >> function is never called by explorer when
> >> displaying properties on a file.)
> >
> >
> > AFAIK Neal Christiansen wrote that the shell
> > just tests the name of the file system for “NTFS”,
> > otherwise it will not show the security page.
> >
> > A newer version of the shell will test the
> > FILE_PERSISTENT_ACLS bit, but
> > it is probably not known if it will be in Longhorn
> > or in some XP service pack too.
>
> Yikes; or more acurately ‘AAAAAAAAAAARGGGGGGHHHH’
>
> However, I set my filesystem name to NTFS, and
> still don’t get the security tab-- nor does
> explorer ever call my MRxQuerySdInfo function.
>
> Is there something else that maybe explorer is looking
> for?
>
> Thanks,
>
> Joseph
>
> We have a filesystem *not* named “NTFS” which *does* display the security
tab. Make sure that FILE_PERSISTENT_ACLS is set in return to
Well, I tried to find the post I’ve written about
You are right, it was about something slightly different.
Sorry for the confusion.
http://www.osronline.com/lists_archive/ntfsd/thread4946.html
L.
> However, when I use the Win32 functions,
GetNamedSecurityInfo() or GetSecurityInfo(),
I get back S_FALSE as the return value, and
GetLastError() is also set to S_FALSE.
Anybody have any clue what might be causing
Win32 to go up in flames?
Just for the interested, a bug in my driver
of course 
For whatever reason, GetSecurityInfo() also
calls NtQuerySecurityObject() on the parent
directory, which, due to a bug in my driver
was failing.
My tests with GetSecurityInfo() are now
suceeding… but…
Also, explorer doesn’t show the security tab for
my file system (and in fact my MRxQuerySdInfo
function is never called by explorer when
displaying properties on a file.)
I do set the FILE_PERSISTENT_ACLS bit in the
FileFsAttributeInformation.
Any one have any clues what explorer is looking
for here before it displays the page?
This problem persists.