阅读:2716回复:4
在minifilter中如何修改文件属性的返回值
我们在一个项目中需要根据文件的权限修改文件只读属性,但是在PostQueryInformation中虽然已经设置了FileAttributes = FILE_ATTRIBUTE_READONLY,并且也调用了FltSetCallbackDataDirty(Data),但为什么总是没有效果,请问应该怎么实现啊?
|
|
沙发#
发布于:2009-09-16 09:04
没人知道吗?
|
|
板凳#
发布于:2009-09-16 09:30
Read your question 5 times, still don't understand what you are trying to do. If you want to change file attribute, why you do it in PostQueryInformation? It's a query, it won't change anything. Do you really want file attribute changed or just cheat user mode applications?
|
|
地板#
发布于:2009-09-17 09:50
是这样的,我只是想在过虑驱动中修改文件属性,看了sfilter的代码,发现是通过irp->AssociatedIrp.SystemBuffer修改文件信息的,但是minifilter如何获得irp呢?
|
|
地下室#
发布于:2010-10-13 12:53
遇到同样问题,目的就是cheat用户程序,楼主找到解决办法了吗?
|
|