Re[2]: Blocking IRP_MJ_READ

NTFSD
1

Don’t block IRP_MJ_CREATE requests, but remove FILE_READ_DATA / FILE_READ_ATTRIBUTES

and FILE_READ_EA flags in Create dispatch routine. Let lower devices to block

read IRPs instead of you ;).

IIRC Desired Access check is done in the IO manager, at least

on local files. So removing these bits in filter driver will

not change anything.

L.

2

That’s a good suggestion, however, I don’t understand what will happen to fileopen dialog box when it tries to display the file properties such as size, modified date etc. But I’ll give it a try.

Thanks,
–RU

3

Some of that stuff is covered by the READ_ATTRIBUTES privilege. Whether
or not the dialog is opening the file with the lowest possible requested
accss will probably determine what happens.

~Eric

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@yahoo.com
Sent: Friday, February 22, 2008 12:33 PM
To: Windows File Systems Devs Interest List
Subject: RE:[ntfsd] Blocking IRP_MJ_READ

That’s a good suggestion, however, I don’t understand what will happen
to fileopen dialog box when it tries to display the file properties such
as size, modified date etc. But I’ll give it a try.

Thanks,
–RU

NTFSD is sponsored by OSR

For our schedule debugging and file system seminars (including our new
fs mini-filter seminar) visit:
http://www.osr.com/seminars

You are currently subscribed to ntfsd as: xxxxx@edsiohio.com To
unsubscribe send a blank email to xxxxx@lists.osr.com