Problem in Stoping Copy

NTFSD
1

Hi all,
I am new to Driver programming and i want to know how to stop the copy
operation from my file system filter(upper) driver what are the IRP comes
and in which order, any comment on this will be helpful to me
Thanks in advance
Manish

2

There is no “copy operation” at file systems level - the primitives at
the file system level have to do with reading and writing blocks of
files. Thus, if you want to stop what you THINK is a copy, you can
define heuristics for copying. Keep in mind, though, that once an
application programmer figures out what you are doing they can find a
way to work around what you are doing.

For example, you might say “a single thread (or process) that reads from
a given location in a file may not write that same block of data to a
different file within 30 seconds”. In that scenario, a clever
application programmer would then figure out how to circumvent your
heuristic. If the goal of your product/project/driver is to make it
HARDER you can be successful. If you are trying to PREVENT this
entirely, you will not be able to succeed.

If you don’t want someone to copy a particular file at all, use ACLs and
prevent them from reading the file. This works extremely well for
executables, which do not require READ_DATA access on a file in order to
execute it. But if you are trying to do this with data files, you need
to carefully define your goals or otherwise you won’t be able to achieve
them.

Regards,

Tony

Tony Mason

Consulting Partner

OSR Open Systems Resources, Inc.

http://www.osr.com http:</http:>

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Manish Sharma
Sent: Friday, September 02, 2005 10:39 AM
To: ntfsd redirect
Subject: [ntfsd] Problem in Stoping Copy

Hi all,

I am new to Driver programming and i want to know how to stop
the copy operation from my file system filter(upper) driver what are the
IRP comes and in which order, any comment on this will be helpful to me

Thanks in advance

Manish

— Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17 You are currently subscribed
to ntfsd as: unknown lmsubst tag argument: ‘’ To unsubscribe send a
blank email to xxxxx@lists.osr.com