FltRequestSecurityInfoOnCreateCompletion function (fltkernel.h)

Article
05/22/2024

A minifilter calls FltRequestSecurityInfoOnCreateCompletion during file pre-create to request that the file system stores file security information for retrieval during post create.

Syntax

NTSTATUS FLTAPI FltRequestSecurityInfoOnCreateCompletion(
  PFLT_FILTER          Filter,
  PFLT_CALLBACK_DATA   Data,
  SECURITY_INFORMATION SecurityInformation
);

Parameters

Filter

Opaque filter pointer that uniquely identifies the minifilter driver.

Data

Pointer to the FLT_CALLBACK_DATA callback data representing the I/O create operation.

SecurityInformation

SECURITY_INFORMATION value specifying the information to be set as a combination of one or more of the following.

Value	Meaning
OWNER_SECURITY_INFORMATION	Indicates the owner identifier of the object is to be set. Requires WRITE_OWNER access.
GROUP_SECURITY_INFORMATION	Indicates the primary group identifier of the object is to be set. Requires WRITE_OWNER access.
DACL_SECURITY_INFORMATION	Indicates the discretionary access control list (DACL) of the object is to be set. Requires WRITE_DAC access.
SACL_SECURITY_INFORMATION	Indicates the system ACL (SACL) of the object is to be set. Requires ACCESS_SYSTEM_SECURITY access.

Return value

FltRequestSecurityInfoOnCreateCompletion can return one of the following values:

Return code	Description
STATUS_SUCCESS	The file system successfully stored the requested file security information.
STATUS_INSUFFICIENT_RESOURCES	FltRequestSecurityInfoOnCreateCompletion was unable to allocate sufficient memory in which to store the requested file information.
STATUS_INVALID_PARAMETER_2	The provided callback data object was not an IRP-based create operation.

Remarks

The minifilter can retrieve the file information by calling FltRetrieveFileInfoOnCreateCompletionEx or FltRetrieveFileInfoOnCreateCompletion during post create. A minifilter's performance is typically better when it requests and retrieves file information in this manner, rather than querying file information at a later time.

Requirements

Requirement	Value
Minimum supported client	Windows 11, version 24H2
Header	fltkernel.h (include Fltkernel.h)

Share via