Rolling IRP_MJ_CREATE

NTFSD
1

Hi everybody!

Has anybody ever created a IRP_MJ_CREATE Irp from scratch? (I’m trying to
avoid certain re-enter issues for my filter driver)

Unfortunately I don’t know how to initialize the AccessState struct in
‘SecurityContext’. Internally the OS uses SeCreateAccessState() but I’m
not sure about the second parameter (the one which ends up under
ACCESS_STATE.AuxData.)

Any hints?

Thanks,
-Stephan

2

Yes, I used this technique, successfuly.
If you want to know some details or want some
source codes please contact me separately.

Paul

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of
xxxxx@yahoo.com
Sent: Monday, November 20, 2000 7:00 PM
To: File Systems Developers
Subject: [ntfsd] Rolling IRP_MJ_CREATE

Hi everybody!

Has anybody ever created a IRP_MJ_CREATE Irp from scratch? (I’m trying
to
avoid certain re-enter issues for my filter driver)

Unfortunately I don’t know how to initialize the AccessState struct in
‘SecurityContext’. Internally the OS uses SeCreateAccessState() but I’m

not sure about the second parameter (the one which ends up under
ACCESS_STATE.AuxData.)

Any hints?

Thanks,
-Stephan

You are currently subscribed to ntfsd as: xxxxx@compelson.com
To unsubscribe send a blank email to $subst(‘Email.Unsub’)

3

Looks to me the second argument is same as the desired access we pass
in NtCreateFile, which is of ACCESS_MASK.
But still are you sure you wanna do this, maybe a REPARSE scheme can
help you?

–naja

— xxxxx@yahoo.com wrote:

Hi everybody!

Has anybody ever created a IRP_MJ_CREATE Irp from scratch? (I’m
trying to
avoid certain re-enter issues for my filter driver)

Unfortunately I don’t know how to initialize the AccessState struct
in
‘SecurityContext’. Internally the OS uses SeCreateAccessState() but
I’m
not sure about the second parameter (the one which ends up under
ACCESS_STATE.AuxData.)

Any hints?

Thanks,
-Stephan

You are currently subscribed to ntfsd as: xxxxx@yahoo.com
To unsubscribe send a blank email to $subst(‘Email.Unsub’)

Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/