IRP_MJ_SET_SECURITY success but explorer reports ACCESS DENIED

NTFSD
1

Hi, All
    I got a problem in my file system driver. It was ok in windows xp. But in windows vista, it does not work correctly.
    When I set the security attribute of a directory in explorer, it reports ACCESS DENIED to me. But I debugged my
file system driver and found that the IRP_MJ_SET_SECURITY request was processed successfully. And I didn’t catch
any IRP failed with status code STATUS_ACCESS_DENIED in filespy. Only IRP_MJ_QUERY_INFORMATION request
which FileInformationClass was FileNetworkPhysicalNameInformation failed with STATUS_INVALID_PARAMETER.
Does anyone know what’s chaged in Vista? Thanks.

好玩贺卡等你发，邮箱贺卡全新上线！
http://card.mail.cn.yahoo.com/

2

Since you did not notice it was failing in the kernel, you probably need to do some investigation in the user mode (explorer.exe) to find out which API is failing. First set a breakpoint in SetSecurityInfo
and make sure it is success. If it is, that means your focus is wrong you need to find the true API failing by going up the stack leading up to the error dialog. If it is failing that means some other drivers than you are watching (when you said it was successfully processed) is failing it. This user-mode/kernel mode tracking is necessary even though painful if you do not know which kernel function is failing.

Lijun

 

From: 光凯 张
To: Windows File Systems Devs Interest List
Sent: Tue, December 29, 2009 4:28:50 AM
Subject: [ntfsd] IRP_MJ_SET_SECURITY success but explorer reports ACCESS DENIED

Hi, All
I got a problem in my file system driver. It was ok in windows xp. But in windows vista, it does not work correctly.
When I set the security attribute of a directory in explorer, it reports ACCESS DENIED to me. But I debugged my
file system driver and found that the IRP_MJ_SET_SECURITY request was processed successfully. And I didn’t catch
any IRP failed with status code STATUS_ACCESS_DENIED in filespy. Only IRP_MJ_QUERY_INFORMATION request
which FileInformationClass was FileNetworkPhysicalNameInformation failed with STATUS_INVALID_PARAMETER.
Does anyone know what’s chaged in Vista? Thanks.

___________________________________________________________
好玩贺卡等你发，邮箱贺卡全新上线！
http://card.mail.cn.yahoo.com/

—
NTFSD is sponsored by OSR

For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer