FltRequestSecurityInfoOnCreateCompletion - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
NTSTATUS FLTAPI FltRequestSecurityInfoOnCreateCompletion(
PFLT_FILTER Filter,
PFLT_CALLBACK_DATA Data,
SECURITY_INFORMATION SecurityInformation
);
View the official Windows Driver Kit DDI referenceNo description available.
A minifilter calls FltRequestSecurityInfoOnCreateCompletion during file pre-create to request that the file system stores file security information for retrieval during post create.
FilterOpaque filter pointer that uniquely identifies the minifilter driver.
DataPointer to the FLT_CALLBACK_DATA callback data representing the I/O create operation.
SecurityInformationSECURITY_INFORMATION value specifying the information to be set as a combination of one or more of the following.
| Value | Meaning |
|---|---|
| OWNER_SECURITY_INFORMATION | Indicates the owner identifier of the object is to be set. Requires WRITE_OWNER access. |
| GROUP_SECURITY_INFORMATION | Indicates the primary group identifier of the object is to be set. Requires WRITE_OWNER access. |
| DACL_SECURITY_INFORMATION | Indicates the discretionary access control list (DACL) of the object is to be set. Requires WRITE_DAC access. |
| SACL_SECURITY_INFORMATION | Indicates the system ACL (SACL) of the object is to be set. Requires ACCESS_SYSTEM_SECURITY access. |
FltRequestSecurityInfoOnCreateCompletion can return one of the following values:
| Return code | Description |
|---|---|
| STATUS_SUCCESS | The file system successfully stored the requested file security information. |
| STATUS_INSUFFICIENT_RESOURCES | FltRequestSecurityInfoOnCreateCompletion was unable to allocate sufficient memory in which to store the requested file information. |
| STATUS_INVALID_PARAMETER_2 | The provided callback data object was not an IRP-based create operation. |
The minifilter can retrieve the file information by calling FltRetrieveFileInfoOnCreateCompletionEx or FltRetrieveFileInfoOnCreateCompletion during post create. A minifilter's performance is typically better when it requests and retrieves file information in this manner, rather than querying file information at a later time.
FltRetrieveFileInfoOnCreateCompletion
FltRetrieveFileInfoOnCreateCompletionEx