IkeextSaDbSetSecurityInfo0 function (fwpmk.h)

  • Article

The IkeextSaDbSetSecurityInfo0 function sets specified security information in the security descriptor of the IKE/AuthIP security association database.

Syntax

NTSTATUS IkeextSaDbSetSecurityInfo0(
  [in]           HANDLE               engineHandle,
  [in]           SECURITY_INFORMATION securityInfo,
  [in, optional] const SID            *sidOwner,
  [in, optional] const SID            *sidGroup,
  [in, optional] const ACL            *dacl,
  [in, optional] const ACL            *sacl
);

Parameters

[in] engineHandle

Handle for an open session to the filter engine. Call FwpmEngineOpen0 to open a session to the filter engine.

[in] securityInfo

The type of security information to set.

[in, optional] sidOwner

The owner's security identifier (SID) to be set in the security descriptor.

[in, optional] sidGroup

The group's SID to be set in the security descriptor.

[in, optional] dacl

The discretionary access control list (DACL) to be set in the security descriptor.

[in, optional] sacl

The system access control list (SACL) to be set in the security descriptor.

Return value

Return code/value Description
ERROR_SUCCESS
0		 The security information was set successfully.
FWP_E_* error code
0x80320001—0x80320039		 A Windows Filtering Platform (WFP) specific error. See WFP Error Codes for details.
RPC_* error code
0x80010001—0x80010122		 Failure to communicate with the remote or local firewall engine.
Other NTSTATUS codes An error occurred.

Remarks

This function behaves like the standard Win32 SetSecurityInfo function. The caller needs the same standard access rights as described in the SetSecurityInfo reference topic.

IkeextSaDbSetSecurityInfo0 is a specific implementation of IkeextSaDbSetSecurityInfo. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information.

Requirements

Requirement Value
Minimum supported client Available starting with Windows Vista.
Target Platform Universal
Header fwpmk.h
Library fwpkclnt.lib
IRQL <= PASSIVE_LEVEL

See also