SDDL

hi,

can SDDL be used for file system filter drivers? if so, how do i use it? the
example in NT Insider seems to be for WDM drivers.

is SDDL available for NT 4?

is SDDL a pre-requisite for IoCreateDeviceSecure? i can only find this API
in the XP SP1 IFS Kit and not the XP IFS Kit or 2K IFS Kit.

Ampsi

The kernel implementation of (the subset of) SDDL was done specifically to
support IoCreateDeviceSecure, which is first available in Windows XP SP1.

There is no support for (the subset of) SDDL in the kernel, or for
IoCreateDeviceSecure, before XP SP1.

While IoCreateDeviceSecure was designed with WDM drivers in mind, I can’t
think of any reason you couldn’t use it from a file system or file system
filter.

Peter
OSR

so does the use of SDDL in INF files as described in the Mar-Apr 2002’s
issue of the NT Insider applies to NT?

btw, in the Jul-Aug 2002’s issue of the NT Insider, it mentioned something
like IoCreateDeviceSecure is usable in Win2K as well because the code is in
static library?

Ampsi

----- Original Message -----
From:
To: “File Systems Developers”
Sent: Friday, May 02, 2003 20:25
Subject: [ntfsd] Re: SDDL

The kernel implementation of (the subset of) SDDL was done specifically to
support IoCreateDeviceSecure, which is first available in Windows XP SP1.

There is no support for (the subset of) SDDL in the kernel, or for
IoCreateDeviceSecure, before XP SP1.

While IoCreateDeviceSecure was designed with WDM drivers in mind, I can’t
think of any reason you couldn’t use it from a file system or file system
filter.

Peter
OSR


You are currently subscribed to ntfsd as: xxxxx@pmail.ntu.edu.sg
To unsubscribe send a blank email to xxxxx@lists.osr.com

IoCreateDeviceSecure works fine in non-WDM drivers, and works on Win2k
also because it is part of a static library (wdmsec.lib). It won’t work
on NT4, however.

  • Nick Ryan

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ampsi
Sent: Sunday, May 04, 2003 6:57 PM
To: File Systems Developers
Subject: [ntfsd] Re: SDDL

so does the use of SDDL in INF files as described in the
Mar-Apr 2002’s issue of the NT Insider applies to NT?

btw, in the Jul-Aug 2002’s issue of the NT Insider, it
mentioned something like IoCreateDeviceSecure is usable in
Win2K as well because the code is in static library?

Ampsi

----- Original Message -----
From:
> To: “File Systems Developers”
> Sent: Friday, May 02, 2003 20:25
> Subject: [ntfsd] Re: SDDL
>
>
> The kernel implementation of (the subset of) SDDL was done
> specifically to support IoCreateDeviceSecure, which is first
> available in Windows XP SP1.
>
> There is no support for (the subset of) SDDL in the kernel,
> or for IoCreateDeviceSecure, before XP SP1.
>
> While IoCreateDeviceSecure was designed with WDM drivers in
> mind, I can’t think of any reason you couldn’t use it from a
> file system or file system filter.
>
> Peter
> OSR
>
> —
> You are currently subscribed to ntfsd as:
> xxxxx@pmail.ntu.edu.sg To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@nryan.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>