Windows: Restrict the Service IOCTLS to the service process
authorRod Widdowson <rdw@steadingsoftware.com>
Fri, 28 Dec 2012 15:43:52 +0000 (15:43 +0000)
committerJeffrey Altman <jaltman@your-file-system.com>
Mon, 7 Jan 2013 17:13:18 +0000 (09:13 -0800)
commit3ee5e20170b4c42f6fccabaf70e28d14e35fae53
tree8f960f84618c31f9100faa37bbe527846f555a64
parent8a17568fb4fd3f77a3b9d043bbe49e992bca8266
Windows: Restrict the Service IOCTLS to the service process

When the service starts the system we save it's PID and when we see a
IOCTL_AFS_INITIALIZE_REDIRECTOR_DEVICE,
IOCTL_AFS_PROCESS_IRP_REQUEST, IOCTL_AFS_PROCESS_IRP_RESULT,
IOCTL_AFS_SYSNAME_NOTIFICATION or IOCTL_AFS_SYSNAME_NOTIFICATION
ioctl we check that the calling process has that PID.

Change-Id: Ie66676bba4b4e4d858979babe9c0af4c53ea0143
Reviewed-on: http://gerrit.openafs.org/8844
Reviewed-by: Rod Widdowson <rdw@steadingsoftware.com>
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@your-file-system.com>
src/WINNT/afsrdr/kernel/fs/AFSCleanup.cpp
src/WINNT/afsrdr/kernel/fs/AFSCommSupport.cpp
src/WINNT/afsrdr/kernel/fs/AFSProcessSupport.cpp
src/WINNT/afsrdr/kernel/fs/Include/AFSCommon.h