Lines Matching full:attribute
187 * in the bitmap attribute of the mft; presumably in order to avoid accidental
193 FILE_MFT = 0, /* Master file table (mft). Data attribute
194 contains the entries and bitmap attribute
197 in data attribute. If cluster size > 4kiB,
200 FILE_LogFile = 2, /* Journalling log in data attribute. */
201 FILE_Volume = 3, /* Volume name attribute and volume information
202 attribute (flags and ntfs version). Windows
205 FILE_AttrDef = 4, /* Array of attribute definitions in data
206 attribute. */
209 data attribute. */
211 attribute. */
213 data attribute. */
214 FILE_Secure = 9, /* Shared security descriptors in data attribute
219 characters in data attribute. */
307 * This is followed by a sequence of variable length attribute records which
308 * is terminated by an attribute of type AT_END which is a truncated attribute
309 * in that it only consists of the attribute type code AT_END and none of the
310 * other members of the attribute structure are present.
336 /* 20*/ le16 attrs_offset; /* Byte offset to the first attribute in this
351 locate the attribute list attribute present
356 attribute list also means finding the other
360 the next attribute added to this mft record.
405 /* 20*/ le16 attrs_offset; /* Byte offset to the first attribute in this
420 locate the attribute list attribute present
425 attribute list also means finding the other
429 the next attribute added to this mft record.
447 * System defined attributes (32-bit). Each attribute type has a corresponding
448 * attribute name (Unicode string of maximum 64 character length) as described
449 * by the attribute definitions present in the data attribute of the $AttrDef
529 * The flags (32-bit) describing attribute properties in the attribute
533 * name attribute has this flag set and this is the only attribute indexed in
537 ATTR_DEF_INDEXABLE = cpu_to_le32(0x02), /* Attribute can be
539 ATTR_DEF_MULTIPLE = cpu_to_le32(0x04), /* Attribute type
542 ATTR_DEF_NOT_ZERO = cpu_to_le32(0x08), /* Attribute value
545 ATTR_DEF_INDEXED_UNIQUE = cpu_to_le32(0x10), /* Attribute must be
546 indexed and the attribute value must be
547 unique for the attribute type in all of
549 ATTR_DEF_NAMED_UNIQUE = cpu_to_le32(0x20), /* Attribute must be
551 the attribute type in all of the mft
553 ATTR_DEF_RESIDENT = cpu_to_le32(0x40), /* Attribute must be
556 modifications to this attribute,
559 modifications if the attribute is
566 * The data attribute of FILE_AttrDef contains a sequence of attribute
570 * Entries are sorted by attribute type. The flags describe whether the
571 * attribute can be resident/non-resident and possibly other things, but the
576 /* 0*/ ntfschar name[0x40]; /* Unicode name of the attribute. Zero
578 /* 80*/ ATTR_TYPE type; /* Type of the attribute. */
582 /* 8c*/ ATTR_DEF_FLAGS flags; /* Flags describing the attribute. */
583 /* 90*/ sle64 min_size; /* Optional minimum attribute size. */
584 /* 98*/ sle64 max_size; /* Maximum size of attribute. */
589 * Attribute flags (16-bit).
603 * Attribute compression.
605 * Only the data attribute is ever compressed in the current ntfs driver in
606 * Windows. Further, compression is only applied when the data attribute is
612 * non-resident attribute record header (more precisely: X = 2^compression_unit
661 * NOTE: At the end of the compressed attribute value, there most likely is not
673 RESIDENT_ATTR_IS_INDEXED = 0x01, /* Attribute is referenced in an index
675 modifying the attribute). */
681 * Attribute record header. Always aligned to 8-byte boundary.
685 /* 0*/ ATTR_TYPE type; /* The (32-bit) type of the attribute. */
687 attribute (aligned to 8-byte boundary).
688 Used to get to the next attribute. */
689 /* 8*/ u8 non_resident; /* If 0, attribute is resident.
690 If 1, attribute is non-resident. */
691 /* 9*/ u8 name_length; /* Unicode character size of name of attribute.
694 beginning of the name from the attribute
698 follow with attribute value or mapping pairs
702 /* 12*/ ATTR_FLAGS flags; /* Flags describing the attribute. */
703 /* 14*/ le16 instance; /* The instance of this attribute record. This
710 /* 16 */ le32 value_length;/* Byte size of attribute value. */
711 /* 20 */ le16 value_offset;/* Byte offset of the attribute
713 attribute record. When creating,
725 for this portion of the attribute value or
727 case). - Only when an attribute list is used
730 the attribute value. - Usually there is only one
731 portion, so this usually equals the attribute
752 allocated to hold the attribute value. Always
759 /* 48*/ sle64 data_size; /* Byte size of the attribute
761 attribute value is compressed or sparse. */
763 portion of the attribute value. Usually equals
766 /* 64*/ sle64 compressed_size; /* Byte size of the attribute
779 * File attribute flags (32-bit) appearing in the file_attributes fields of the
780 * STANDARD_INFORMATION attribute of MFT_RECORDs and the FILENAME_ATTR
784 * appear in the STANDARD_INFORMATION attribute whilst only some others appear
785 * in the FILENAME_ATTR attribute of MFT_RECORDs. Unless otherwise stated the
822 * attribute of an mft record.
827 an index root attribute or not. */
845 * Attribute: Standard information (0x10).
858 /* 8*/ sle64 last_data_change_time; /* Time the data attribute was last
883 * Recognize the difference by comparing the length of the resident attribute
889 * Upgrade attribute to NTFS 3.x format.
927 * Attribute: Attribute list (0x20).
934 * the attribute value size.
935 * - The attribute list attribute contains one entry for each attribute of
936 * the file in which the list is located, except for the list attribute
937 * itself. The list is sorted: first by attribute type, second by attribute
939 * non-resident attribute (if present) immediately follow after the initial
945 * - The attribute list attribute value has a maximum size of 256kb. This
947 * - Attribute lists are only used when the attributes of mft record do not
952 * - The mapping pairs array of some non-resident attribute becomes so
960 /* 0*/ ATTR_TYPE type; /* Type of referenced attribute. */
963 attribute or 0 if unnamed. */
964 /* 7*/ u8 name_offset; /* Byte offset to beginning of attribute name
968 of the attribute value. This is usually 0. It
969 is non-zero for the case where one attribute
972 this attribute. In the latter case, each mft
973 record holds one extent of the attribute and
974 there is one attribute list entry for each
981 attribute value. */
983 attribute being referenced; otherwise 0. */
1029 * Attribute: Filename (0x30).
1035 * information attribute.
1046 /* 10*/ sle64 last_data_change_time; /* Time the data attribute was last
1053 for the unnamed data attribute. So
1056 $DATA attribute and for compressed
1059 $DATA attribute. For a directory or
1061 attribute, this is always 0. NOTE:
1065 data attribute. For a directory or
1067 attribute, this is always 0. */
1132 * Attribute: Object id (NTFS 3.0+) (0x40).
1139 /* The following fields are optional. The attribute value size is 16
1773 * Attribute: Security descriptor (0x50). A standard self-relative security
1779 * from the standard information attribute.
1787 * FILE_Secure contains no unnamed data attribute, i.e. it has zero length. It
1795 * data attribute. The $SII index is sorted by ascending security_id.
1799 * the security descriptor's storage location within the $SDS data attribute.
1807 * descriptor in the $SDS attribute is read from the found $SDH index entry and
1808 * is stored in the $STANDARD_INFORMATION attribute of the file/directory to
1810 * attribute is present in all base mft records (i.e. in all files and
1814 * security_id and is added to the $SDS data attribute. Then, entries
1815 * referencing the this security descriptor in the $SDS data attribute are
1875 * Attribute: Volume name (0x60).
1908 * Attribute: Volume information (0x70).
1923 * Attribute: Data attribute (0x80).
1938 * When index header is in an index root attribute:
1941 root attribute and there is no index allocation
1942 attribute present. */
1944 attribute and/or an index allocation attribute is
1948 * allocation attribute:
1976 /* NOTE: For the index root attribute, the above two numbers are always
1977 equal, as the attribute is resident and it is resized as needed. In
1978 the case of the index allocation attribute the attribute is not
1980 equal the index_block_size specified by the INDEX_ROOT attribute
1981 corresponding to the INDEX_ALLOCATION attribute this INDEX_BLOCK
1988 * Attribute: Index root (0x90).
1996 * is the only attribute describing the directory. When the directory is too
1998 * are present: an index allocation attribute, containing sub-nodes of the B+
1999 * directory tree (see below), and a bitmap attribute, describing which virtual
2000 * cluster numbers (vcns) in the index allocation attribute are in use by an
2007 ATTR_TYPE type; /* Type of the indexed attribute. Is
2015 the index allocation attribute). */
2017 the index allocation attribute), when
2030 * Attribute: Index allocation (0xa0).
2078 reparse point attribute. */
2118 * owner_id, is found in the standard information attribute. The collation rule
2212 * an index root attribute or an index allocation attribute.
2242 /* 16*/ union { /* The key of the indexed attribute. NOTE: Only present
2268 // of the non-resident index allocation attribute). If
2278 * Attribute: Bitmap (0xb0).
2282 * When used in conjunction with the index allocation attribute, each bit
2283 * corresponds to one index block within the index allocation attribute. Thus
2285 * number of clusters in the index allocation attribute.
2335 * Attribute: Reparse point (0xc0).
2347 * Attribute: Extended attribute (EA) information (0xd0).
2364 * Extended attribute flags (8-bit).
2375 * Attribute: Extended attribute (EA) (0xe0).
2379 * Like the attribute list and the index buffer list, the EA attribute value is
2395 * Attribute: Property set (0xf0).
2405 * Attribute: Logged utility stream (0x100).
2409 * Operations on this attribute are logged to the journal ($LogFile) like
2413 * attribute with the name $EFS.