Any knows how to set SACL info in the security descriptor to be returned as part of implementing IRP_MJ_QUERY_SECURITY? For setting DACL, the function is RtlSetDaclSecurityDescriptor(), but for SACL, MSDN says RtlSetSaclSecurityDescriptor() is only available via LoadLibrary() and GetProcAddress() functions. But LoadLibrary() and GetProcAddress() cannot be called in the kernel. How do I call RtlSetSaclSecurityDescriptor(), or is there another way to set SACL in a security descriptor in the kernel? Thanks!
> But LoadLibrary() and GetProcAddress() cannot be called in the kernel.
MmGetSystemRoutineAddress.
L.