Download EaseFilter Filter Driver SDK Setup File Download EaseFilter Filter Driver SDK Zip File
FltSetSecurityObject sets an object's security state.
NTSTATUS FLTAPI FltSetSecurityObject( PFLT_INSTANCE Instance, PFILE_OBJECT FileObject, SECURITY_INFORMATION SecurityInformation, PSECURITY_DESCRIPTOR SecurityDescriptor );
Opaque instance pointer for the caller. This parameter is required and cannot be NULL.
File object pointer for the object whose security state is to be set. The caller must have the access specified in the Meaning column of the table shown in the description of the SecurityInformation parameter. This parameter is required and cannot be NULL.
Pointer to a SECURITY_INFORMATION value specifying the information to be set as a combination of one or more of the following. This parameter is required and cannot be NULL.
|DACL_SECURITY_INFORMATION||Indicates the discretionary access control list (DACL) of the object is to be set. Requires WRITE_DAC access.|
|GROUP_SECURITY_INFORMATION||Indicates the primary group identifier of the object is to be set. Requires WRITE_OWNER access.|
|OWNER_SECURITY_INFORMATION||Indicates the owner identifier of the object is to be set. Requires WRITE_OWNER access.|
|SACL_SECURITY_INFORMATION||Indicates the system ACL (SACL) of the object is to be set. Requires ACCESS_SYSTEM_SECURITY access.|
Pointer to the security descriptor to be set for the object.
FltSetSecurityObject returns STATUS_SUCCESS or an appropriate NTSTATUS value such as one of the following:
||The caller did not have the required access. This is an error code.|
||SecurityDescriptor was a NULL pointer. This is an error code.|
||The object's security descriptor could not be captured. This is an error code.|
||The object's security descriptor contained an invalid ACL. This is an error code.|
||SecurityDescriptor did not point to a valid security descriptor. This is an error code.|
||The object's security descriptor contained an invalid SID. This is an error code.|
||The revision level of the object's security descriptor was unknown or not supported. This is an error code.|
||The FltSetSecurityObject routine is present but not supported in the operating system environment in which it was called.|
The FltSetSecurityObject routine is present and supported starting with Windows Vista. In Windows 2000, Windows XP, and Server 2003 SP1, the routine is present but not supported, and will return STATUS_NOT_IMPLEMENTED if called in any of these environments.
A security descriptor can be in absolute or self-relative form. In self-relative form, all members of the structure are located contiguously in memory. In absolute form, the structure only contains pointers to the members. For more information, see "Absolute and Self-Relative Security Descriptors" in the Security section of the Microsoft Windows SDK documentation.
For more information about security and access control, see the documentation on these topics in the Windows SDK.
|Header||fltkernel.h (include Fltkernel.h)|