Hi
Can I assure that user intention is to read data or execute file by checking
the following flags
( (Disposition & FILE_OPEN) && (Options & FILE_NON_DIRECTORY_FILE) && (
(DesiredAccess & FILE_EXECUTE) || (DesiredAccess &
FILE_READ_DATA) ) && !(Irp->Flags & IRP_PAGING_IO) && !(Irp->Flags &
IRP_SYNCHRONOUS_PAGING_IO) )
in create path
Thanks
Ramaraj
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com