FLT_PARAMETERS for IRP_MJ_QUERY_SECURITY union

Union component used when the MajorFunction field of the FLT_IO_PARAMETER_BLOCK structure for the operation is IRP_MJ_QUERY_SECURITY.

Syntax


typedef union _FLT_PARAMETERS {
  ...    ;
  struct {
    SECURITY_INFORMATION    SecurityInformation;
    ULONG POINTER_ALIGNMENT Length;
    PVOID                   SecurityBuffer;
    PDML                    MdlAddress;
  } QuerySecurity;
  ...    ;
} FLT_PARAMETERS, *PFLT_PARAMETERS;

Members

QuerySecurity

Structure containing the following members.

SecurityInformation

Pointer to a caller-supplied SECURITY_INFORMATION value that specifies the security information to be queried. One of the following:

SecurityInformation ValueMeaning

OWNER_SECURITY_INFORMATION

The owner identifier of the object is being queried. Requires READ_CONTROL access.

GROUP_SECURITY_INFORMATION

The primary group identifier of the object is being queried. Requires READ_CONTROL access.

DACL_SECURITY_INFORMATION

The discretionary access control list (DACL) of the object is being queried. Requires READ_CONTROL access.

SACL_SECURITY_INFORMATION

The system ACL (SACL) of the object is being queried. Requires ACCESS_SYSTEM_SECURITY access.

 

Length

Length, in bytes, of the buffer that SecurityBuffer points to.

SecurityBuffer

Pointer to a caller-supplied output buffer that receives a copy of the security descriptor of the specified object. The calling process must have the right to view the specified aspects of the object's security status. The SECURITY_DESCRIPTOR structure is returned in self-relative format.

MdlAddress

Address of a memory descriptor list (MDL) that describes the buffer that SecurityBuffer points to. This member is optional and can be NULL.

Remarks

The FLT_PARAMETERS structure for IRP_MJ_QUERY_SECURITY operations contains the parameters for an IRP-based query-security-information operation represented by a callback data (FLT_CALLBACK_DATA) structure. It is contained in an FLT_IO_PARAMETER_BLOCK structure.

On Windows XP and later, the object that the TargetFileObject member of the FLT_IO_PARAMETER_BLOCK structure points to can represent a named data stream. For more information about named data streams, see FILE_STREAM_INFORMATION.

IRP_MJ_QUERY_SECURITY is an IRP-based operation.

Requirements

Header

Fltkernel.h (include Fltkernel.h)

See also

FILE_STREAM_INFORMATION
FLT_CALLBACK_DATA
FLT_IO_PARAMETER_BLOCK
FLT_PARAMETERS
IRP_MJ_QUERY_SECURITY
SECURITY_DESCRIPTOR
SECURITY_INFORMATION

 

 

Send comments about this topic to Microsoft

Show: