RtlCreateSystemVolumeInformationFolder - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// ntifs.h

NTSYSAPI NTSTATUS RtlCreateSystemVolumeInformationFolder(
  [in] PCUNICODE_STRING VolumeRootPath
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Windows Driver Kit DDI reference (nf-ntifs-rtlcreatesystemvolumeinformationfolder)

RtlCreateSystemVolumeInformationFolder function

Description

The RtlCreateSystemVolumeInformationFolder routine verifies the existence of the "System Volume Information" folder on a file system volume. If the folder is not present, then the folder is created.

Parameters

VolumeRootPath [in]

A pointer to a path to the root of the volume.

Return value

The RtlCreateSystemVolumeInformationFolder routine returns STATUS_SUCCESS or an appropriate error status representing the final completion status of the operation. Possible error status codes include the following:

Return code Description
STATUS_INSUFFICIENT_RESOURCES A temporary buffer required by this function could not be allocated.

Remarks

The RtlCreateSystemVolumeInformationFolder routine verifies the existence of the "System Volume Information" folder on the given volume.

If the folder is not present, then the folder is created. If the volume is an NTFS volume, the folder is created with an access control list (ACL) containing one access control entry (ACE) indicating full access for the local SYSTEM account, and the ACE will have the inheritance bits set. The folder will be created with the FILE_ATTRIBUTE_HIDDEN and FILE_ATTRIBUTE_SYSTEM attributes set.

If the folder is already present and the volume is an NTFS volume, the ACE that indicates full control for SYSTEM will be checked and if necessary modified to have the inheritance bits set.

For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.

See also

ACE

ACL