RtlCreateSecurityDescriptorRelative function (ntifs.h)

Article
02/22/2024

The RtlCreateSecurityDescriptorRelative routine initializes a new security descriptor in self-relative format. On return, the security descriptor is initialized with no system ACL (SACL), no discretionary ACL (DACL), no owner, no primary group, and all control flags set to zero.

Syntax

NTSYSAPI NTSTATUS RtlCreateSecurityDescriptorRelative(
  [out] PISECURITY_DESCRIPTOR_RELATIVE SecurityDescriptor,
  [in]  ULONG                          Revision
);

Parameters

[out] SecurityDescriptor

Pointer to a caller-allocated buffer, which must be at least sizeof(SECURITY_DESCRIPTOR_RELATIVE), to receive the initialized security descriptor.

[in] Revision

Revision level to assign to the security descriptor. This parameter must be SECURITY_DESCRIPTOR_REVISION.

Return value

RtlCreateSecurityDescriptorRelative can return one of the following:

Return code	Description
STATUS_SUCCESS	The call completed successfully.
STATUS_UNKNOWN_REVISION	The given Revision is not known or is not supported.

Remarks

In effect, a successful call to this routine initializes a security descriptor without security constraints.

For more information about security and access control, see Windows security model for driver developers and the documentation on these topics in the Windows SDK.

Requirements

Requirement	Value
Minimum supported client	Windows 2000
Target Platform	Desktop
Header	ntifs.h (include Ntifs.h)
Library	NtosKrnl.lib
DLL	NtosKrnl.exe
IRQL	PASSIVE_LEVEL