Kernel-only file system changes

From: Ben Harper (ben_at_gls.co.za)
Date: 12/07/03 

Date: Sun, 7 Dec 2003 14:14:00 -0800

I am investigating the possibility of writing a software security system in
a similar vein as flex or cdilla, but without writing a driver. One of my
requirements is to be able to store information on the hard disk that the
user cannot easily touch. My question is this:
On an NTFS file system, are there any modification/creation/access
attributes written to a file that a normal (non-kernel) process cannot
modify? If so, I believe I could use this information to store secure
information. All modification attributes I've come across can be modified by
a normal process.

Thanks,
Ben

Loading