tailieunhanh - Windows Internals covering windows server 2008 and windows vista- P18

Windows Internals covering windows server 2008 and windows vista- P18: In this chapter, we’ll introduce the key Microsoft Windows operating system concepts and terms we’ll be using throughout this book, such as the Windows API, processes, threads, virtual memory, kernel mode and user mode, objects, handles, security, and the registry. | is accessed through the directory symbolic link. File symbolic links work much the same way you can think of them as shortcuts except they are actually implemented on the file system instead of being .lnk files managed by Windows Explorer. Just like hard links symbolic links can be created with the mklink utility without the H option or through the CreateSymbolicLink API. Because certain legacy applications might not behave securely in the presence of symbolic links especially across different machines the creation of symbolic links requires the SeCreateSymbolicLink privilege which is typically granted only to administrators. The file system also has a behavior option called SymLinkEvaluation that can be configured with the following command 1. fsutil behavior set SymLinkEvaluation By default the Windows default symbolic link evaluation policy allows only local-to-local and local-to-remote symbolic links but not the opposite as shown here 1. C fsutil behavior query SymLinkEvaluation 2. Local to local symbolic links are enabled 3. Local to remote symbolic links are enabled. 4. Remote to local symbolic links are disabled. 5. Remote to Remote symbolic links are disabled. Symbolic links are based on an NTFS mechanism called reparse points. Reparse points are discussed further in the section Reparse Points later in this chapter. A reparse point is a file or directory that has a block of data called reparse data associated with it. Reparse data is user-defined data about the file or directory such as its state or location that can be read from the reparse point by the application that created the data a file system filter driver or the I O manager. When NTFS encounters a reparse point during a file or directory lookup it returns a reparse status code which signals file system filter drivers that are attached to the volume and the I O manager to examine the reparse data. Each reparse point type has a unique reparse tag. The reparse tag allows the component .

TỪ KHÓA LIÊN QUAN
crossorigin="anonymous">
Đã phát hiện trình chặn quảng cáo AdBlock
Trang web này phụ thuộc vào doanh thu từ số lần hiển thị quảng cáo để tồn tại. Vui lòng tắt trình chặn quảng cáo của bạn hoặc tạm dừng tính năng chặn quảng cáo cho trang web này.