Changeset 96631 in vbox

Timestamp:

Sep 7, 2022 2:08:12 PM (2 years ago)

Author:

vboxsync

Message:

Add/Nt/Shfl: Some additional info.

File:

• trunk/src/VBox/Additions/WINNT/SharedFolders/driver/vbsf.cpp (modified) (1 diff)

trunk/src/VBox/Additions/WINNT/SharedFolders/driver/vbsf.cpp

@@ -981 +981 @@
        *
        * I'm not sure if the intention here is to create a NULL DACL, which grants unrestricted access to the device.
-       * However, it's somehow now working for Windows XP RTM.
-       * (See https://docs.microsoft.com/en-us/windows/win32/secauthz/null-dacls-and-empty-dacls for NULL DACL.)
+       * However, it's somehow now working for Windows XP RTM.  I think an explicit call to RtlSetDaclSecurityDescriptor
+       * is required for that to work, indicating that a DACL is present but NULL.
+       * (See https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-rtlsetdaclsecuritydescriptor and
+       *  https://docs.microsoft.com/en-us/windows/win32/secauthz/null-dacls-and-empty-dacls for NULL DACL details.)
        *
-       * If the problem is that RESTRICTED should have RWS access, read the descriptor and modify the ACE for RESTRICTED
-       * to grant them write access.
+       * If the problem is that RESTRICTED (S-1-5-12) should have RWS access, read the descriptor and modify the ACE
+       * for RESTRICTED to grant them write access.
        */
                             /* Allow restricted users to use shared folders; works only in XP and Vista. (@@todo hack) */