在Windows驱动程序中创建符号链接（或其他NTFS重新分析点）

Question

I can open, close, create files and directories using the Zw* functions available for Windows Kernel services. I can even open the underlying symbolic link object using ZwOpenSymbolicLinkObject , but I can't seem to actually make symbolic links.

It seems this level of the API is not aware of symbolic links, so how would I go about using this (filesystem!) feature without the Win32 API?

Answer 1

There isn't direct API to create reparse points.

You need to use ZwFsControlFileZwFsControlFile() to send FSCTL_SET_REPARSE_POINT ioctl with appropriate input buffers and parameters.

Don't have example though!