Re: Passing file handle from kernel mode to user mode ?

NTFSD
1

I really don’t know if security check skiped.
Anton, please let us know if succeded.

BR,
Vadim

“Vodicka, Michal” <michal.vodicka> wrote in message
news:xxxxx@ntfsd…
>
> IIRC access rights check is skipped if request originator is in kernel
mode
> and this call should succeed (correct me if it is wrong).
>
> BTW, I’d like to see a good reason for something like this (i.e. violation
> of NT security). Trojan support? :wink:
>
> Best regards,
>
> Michal Vodicka
> STMicroelectronics Design and Application s.r.o.
> [michal.vodicka@st.com, http:://www.st.com]
>
> > ----------
> > From: xxxxx@pcausa.com[SMTP:xxxxx@pcausa.com]
> > Reply To: xxxxx@lists.osr.com
> > Sent: Tuesday, July 02, 2002 1:05 PM
> > To: xxxxx@lists.osr.com
> > Subject: [ntfsd] RE: Passing file handle from kernel mode to user
> > mode?
> >
> > P.S. Sorry, if calling NtCreateFile (ZwCreateFile) in the context of the
> > process which have no right to do this you will also have ACCESS_DENIED
> > even
> > in the kernel mode.
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com]On Behalf Of Anton Kolomyeytsev
> > Sent: Tuesday, July 02, 2002 2:28 PM
> > To: File Systems Developers
> > Subject: [ntfsd] Passing file handle from kernel mode to user mode?
> >
> >
> > Hi!
> >
> > I need to access the file from user mode I do not have rights to access.
> > Can I open this file from kernel mode driver and pass file handle to
user
> > mode? Is this possible?
> >
> > Thanks for help!
> >
> > Regards,
> > Anton
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@pcausa.com
> > To unsubscribe send a blank email to %%email.unsub%%
> >
> >
> > —
> > You are currently subscribed to ntfsd as: michal.vodicka@st.com
> > To unsubscribe send a blank email to %%email.unsub%%
> >
>
></michal.vodicka>

2

Hi!

I promise report investigation results about this topic. Do not know when
this will heppen but it will -)

Thank you for bunch of ideas!

Regards,
Anton Kolomyeytsev

I really don’t know if security check skiped.
Anton, please let us know if succeded.

BR,
Vadim

“Vodicka, Michal” <michal.vodicka> wrote in message
> news:xxxxx@ntfsd…
> >
> > IIRC access rights check is skipped if request originator is in kernel
> mode
> > and this call should succeed (correct me if it is wrong).
> >
> > BTW, I’d like to see a good reason for something like this (i.e. violation
> > of NT security). Trojan support? :wink:
> >
> > Best regards,
> >
> > Michal Vodicka
> > STMicroelectronics Design and Application s.r.o.
> > [michal.vodicka@st.com, http:://www.st.com]
> >
> > > ----------
> > > From: xxxxx@pcausa.com[SMTP:xxxxx@pcausa.com]
> > > Reply To: xxxxx@lists.osr.com
> > > Sent: Tuesday, July 02, 2002 1:05 PM
> > > To: xxxxx@lists.osr.com
> > > Subject: [ntfsd] RE: Passing file handle from kernel mode to user
> > > mode?
> > >
> > > P.S. Sorry, if calling NtCreateFile (ZwCreateFile) in the context of the
> > > process which have no right to do this you will also have ACCESS_DENIED
> > > even
> > > in the kernel mode.
> > >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com]On Behalf Of Anton Kolomyeytsev
> > > Sent: Tuesday, July 02, 2002 2:28 PM
> > > To: File Systems Developers
> > > Subject: [ntfsd] Passing file handle from kernel mode to user mode?
> > >
> > >
> > > Hi!
> > >
> > > I need to access the file from user mode I do not have rights to access.
> > > Can I open this file from kernel mode driver and pass file handle to
> user
> > > mode? Is this possible?
> > >
> > > Thanks for help!
> > >
> > > Regards,
> > > Anton
> > >
> > > —
> > > You are currently subscribed to ntfsd as: xxxxx@pcausa.com
> > > To unsubscribe send a blank email to %%email.unsub%%
> > >
> > >
> > > —
> > > You are currently subscribed to ntfsd as: michal.vodicka@st.com
> > > To unsubscribe send a blank email to %%email.unsub%%
> > >
> >
> ></michal.vodicka>