基于NTFS的文件访问控制研究

Research of File Access Control Based on NTFS

为开发基于NTFS的程序,解决因NTFS对文件访问进行控制而导致系统文件被限制访问的问题,对NTFS的文件访问控制机制进行研究。研究了以安全ID作为主关键字查找$SDS数据块,以及从$SDS数据块中解析出50H属性的主要过程。通过实验总结出了50H属性中32位访问掩码的具体格式及每位掩码代表的访问权限。以上研究结果可应用于基于NTFS的文件访问的自主控制,提高相关程序开发的自由度。实验结果表明,通过修改文件的50H属性可解除设置在Windows系统文件上的访问限制。

For developing the program based on NTFS,and solving the problem that due to NTFS control the file access leading to system file is limited accessible,the system of file access control in NTFS filesystem is researched.The process of security ID as the primary keywords to search $ SDS data block,the process of resolving50H attribute from $ SDS data block,the specific format of 32 bits access mask in 50H attribute,and the meaning of every bit access mask is main studied.The above findings can be applied to control NTFS file access according developer＇s requirement,and to improve the developability of program based on NTFS.The experimental results shows that can break the access restrictions of Windows system file by modify its 50H attribute.