2.2.7.3.1 Request

The NT_TRANSACT_SET_SECURITY_DESC request format is a special case of SMB_COM_NT_TRANSACT (section 2.2.4.62) SMB. Only the NT_TRANSACT_SET_SECURITY_DESC request specifics are described here.

 NT_Trans_Parameters
   {
   USHORT FID;
   USHORT Reserved;
   ULONG  SecurityInformation;
   }
 NT_Trans_Data
   {
   SECURITY_DESCRIPTOR SecurityDescriptor (variable);
   }
  

SMB_Parameters:

WordCount (1 byte): UCHAR This field MUST be 0x13.

Words (38 bytes): Array of USHORT

Function (2 bytes): USHORT This field MUST be NT_TRANSACT_SET_SECURITY_DESC (0x0003).

MaxSetupCount (1 byte): This field MUST be 0x00.

MaxDataCount (4 bytes): This field MUST be 0x00000000.

MaxParameterCount (4 bytes): This field MUST be 0x00000000.

SetupCount (1 byte): UCHAR This field MUST be 0x00.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

NT_Trans_Parameters

...

NT_Trans_Data (variable)

...

NT_Trans_Parameters (8 bytes):


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

FID

Reserved

SecurityInformation

FID (2 bytes): USHORT File identifier or handle of the target file.

Reserved (2 bytes): USHORT Reserved. This value MUST be 0x0000.

SecurityInformation (4 bytes): ULONG Fields of security descriptor to be set. This is a bit field. These values can be logically OR-ed together to set several descriptors in one request. The server MUST set only the descriptors requested by SecurityInformation.

Name and  bitmask

Meaning

OWNER_SECURITY_INFORMATION

0x00000001

Owner of the object or resource.

GROUP_SECURITY_INFORMATION

0x00000002

Group associated with the object or resource.

DACL_SECURITY_INFORMATION

0x00000004

Discretionary access control list (DACL) associated with the object or resource.

SACL_SECURITY_INFORMATION

0x00000008

System access control list (SACL) associated with the object or resource.

NT_Trans_Data  (variable):


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

SecurityDescriptor (variable)

...

SecurityDescriptor (variable): SECURITY_DESCRIPTOR The requested security descriptor structure. The self-relative form of a SECURITY_DESCRIPTOR is required. For details, see [MS-DTYP] SECURITY_DESCRIPTOR (section 2.4.6).

Show: