RE: Retrieving security information regarding thread call- ing IRP_MJ_C REATE

NTFSD
1

Curiously enough, SeQueryInformationToken IS present in NT 4.0, although I
realize this doesn’t help you since it’s not exported. You can see the
function name in the NT 4.0 debugging symbols. Wouldn’t it be nice if every
function whose 3rd character isn’t a ‘p’ was exported by the kernel?

-----Original Message-----
From: Svante Moren [mailto:xxxxx@abaris.se]
Sent: Monday, March 26, 2001 6:14 AM
To: File Systems Developers
Subject: [ntfsd] Retrieving security information regarding thread
calling IRP_MJ_C REATE

Hi all!

In my driver I need to do something like the following when
processing a
IRP_MJ_CREATE:

SECURITY_SUBJECT_CONTEXT stSubject;
PACCESS_TOKEN ptoken;
PTOKEN_OWNER pstTokenOwner = NULL;

SeCaptureSubjectContext(&stSubject);
SeLockSubjectContext(&stSubject);
ptoken = SeQuerySubjectContextToken(&stSubject);
status = SeQueryInformationToken(ptoken, TokenOwner,
&pstTokenOwner);

However, since SeQueryInformationToken() isn’t present in NT4
I need some
other means of accomplishing the same task. I’m greatful for
any hints.

/Svante

You are currently subscribed to ntfsd as: xxxxx@nsisw.com
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com