What FO_DELETE_ON_CLOSE means?

NTFSD
1

Hi all,

In ntifs.h is defined following flag:

#define FO_DELETE_ON_CLOSE 0x00010000

What this flag means, where is it used? Is it related to
FILE_DELETE_ON_CLOSE flag? I know that neither FASTFAT nor CDFS use it.

Thanks

Petr Borsodi

2

I was looking at the question of how to find if a file was created with
delete on close, when I hadnt seen the Create. I tried looking for this
flag in the FileObject.Flags, sort of hoping it was where that state was
held. I couldnt see that flag being set though.

3

IRP_MJ_SET_INFORMATION/FileDispositionInformation are your other chances
to cause a file to go into/out of delete.

(FileObject->DeletePending)

-----Original Message-----
From: Lyndon J. Clarke [mailto:xxxxx@gcplc.com]
Sent: Tuesday, March 25, 2003 5:27 AM
To: File Systems Developers

I was looking at the question of how to find if a file was created with
delete on close, when I hadnt seen the Create. I tried looking for this
flag in the FileObject.Flags, sort of hoping it was where that state was
held. I couldnt see that flag being set though.

You are currently subscribed to ntfsd as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

4

I’ll have a look at FileObject->DeletePending, thanks. I dont see
IRP_MJ_SET_INFORMATION/FileDispositionInformation, in the case where the
file is opened wiht delete-on-close and later closed. Should I?

5

If IRP_MJ_SET_INFORMATION/FileDispositionInformation is called for some
FileObject then I see FileObject->DeletePending is true. If on the other
hand the file is opened with delete-on-close then I see
FileObject->DeletePending is false.

6

Unless you see the create and keep track of it yourself there is
currently no way to know if a file has been opened with
FO_DELETE_ON_CLOSE.

Neal Christiansen
Microsoft File System Filter Group

This posting is provided “AS IS” with no warranties, and confers no
rights.

-----Original Message-----
From: Lyndon J. Clarke [mailto:xxxxx@gcplc.com]
Sent: Wednesday, March 26, 2003 2:37 AM
To: File Systems Developers

If IRP_MJ_SET_INFORMATION/FileDispositionInformation is called for some
FileObject then I see FileObject->DeletePending is true. If on the other
hand the file is opened with delete-on-close then I see
FileObject->DeletePending is false.

You are currently subscribed to ntfsd as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com