Lines Matching full:attribute
201 * in the bitmap attribute of the mft; presumably in order to avoid accidental
207 FILE_MFT = 0, /* Master file table (mft). Data attribute
208 contains the entries and bitmap attribute
211 in data attribute. If cluster size > 4kiB,
214 FILE_LogFile = 2, /* Journalling log in data attribute. */
215 FILE_Volume = 3, /* Volume name attribute and volume information
216 attribute (flags and ntfs version). Windows
219 FILE_AttrDef = 4, /* Array of attribute definitions in data
220 attribute. */
223 data attribute. */
225 attribute. */
227 data attribute. */
228 FILE_Secure = 9, /* Shared security descriptors in data attribute
233 characters in data attribute. */
321 * This is followed by a sequence of variable length attribute records which
322 * is terminated by an attribute of type AT_END which is a truncated attribute
323 * in that it only consists of the attribute type code AT_END and none of the
324 * other members of the attribute structure are present.
350 /* 20*/ le16 attrs_offset; /* Byte offset to the first attribute in this
365 locate the attribute list attribute present
370 attribute list also means finding the other
374 the next attribute added to this mft record.
419 /* 20*/ le16 attrs_offset; /* Byte offset to the first attribute in this
434 locate the attribute list attribute present
439 attribute list also means finding the other
443 the next attribute added to this mft record.
461 * System defined attributes (32-bit). Each attribute type has a corresponding
462 * attribute name (Unicode string of maximum 64 character length) as described
463 * by the attribute definitions present in the data attribute of the $AttrDef
543 * The flags (32-bit) describing attribute properties in the attribute
547 * name attribute has this flag set and this is the only attribute indexed in
551 ATTR_DEF_INDEXABLE = cpu_to_le32(0x02), /* Attribute can be
553 ATTR_DEF_MULTIPLE = cpu_to_le32(0x04), /* Attribute type
556 ATTR_DEF_NOT_ZERO = cpu_to_le32(0x08), /* Attribute value
559 ATTR_DEF_INDEXED_UNIQUE = cpu_to_le32(0x10), /* Attribute must be
560 indexed and the attribute value must be
561 unique for the attribute type in all of
563 ATTR_DEF_NAMED_UNIQUE = cpu_to_le32(0x20), /* Attribute must be
565 the attribute type in all of the mft
567 ATTR_DEF_RESIDENT = cpu_to_le32(0x40), /* Attribute must be
570 modifications to this attribute,
573 modifications if the attribute is
580 * The data attribute of FILE_AttrDef contains a sequence of attribute
584 * Entries are sorted by attribute type. The flags describe whether the
585 * attribute can be resident/non-resident and possibly other things, but the
590 /* 0*/ ntfschar name[0x40]; /* Unicode name of the attribute. Zero
592 /* 80*/ ATTR_TYPE type; /* Type of the attribute. */
596 /* 8c*/ ATTR_DEF_FLAGS flags; /* Flags describing the attribute. */
597 /* 90*/ sle64 min_size; /* Optional minimum attribute size. */
598 /* 98*/ sle64 max_size; /* Maximum size of attribute. */
603 * Attribute flags (16-bit).
617 * Attribute compression.
619 * Only the data attribute is ever compressed in the current ntfs driver in
620 * Windows. Further, compression is only applied when the data attribute is
626 * non-resident attribute record header (more precisely: X = 2^compression_unit
675 * NOTE: At the end of the compressed attribute value, there most likely is not
687 RESIDENT_ATTR_IS_INDEXED = 0x01, /* Attribute is referenced in an index
689 modifying the attribute). */
695 * Attribute record header. Always aligned to 8-byte boundary.
699 /* 0*/ ATTR_TYPE type; /* The (32-bit) type of the attribute. */
701 attribute (aligned to 8-byte boundary).
702 Used to get to the next attribute. */
703 /* 8*/ u8 non_resident; /* If 0, attribute is resident.
704 If 1, attribute is non-resident. */
705 /* 9*/ u8 name_length; /* Unicode character size of name of attribute.
708 beginning of the name from the attribute
712 follow with attribute value or mapping pairs
716 /* 12*/ ATTR_FLAGS flags; /* Flags describing the attribute. */
717 /* 14*/ le16 instance; /* The instance of this attribute record. This
724 /* 16 */ le32 value_length;/* Byte size of attribute value. */
725 /* 20 */ le16 value_offset;/* Byte offset of the attribute
727 attribute record. When creating,
739 for this portion of the attribute value or
741 case). - Only when an attribute list is used
744 the attribute value. - Usually there is only one
745 portion, so this usually equals the attribute
766 allocated to hold the attribute value. Always
773 /* 48*/ sle64 data_size; /* Byte size of the attribute
775 attribute value is compressed or sparse. */
777 portion of the attribute value. Usually equals
780 /* 64*/ sle64 compressed_size; /* Byte size of the attribute
793 * File attribute flags (32-bit) appearing in the file_attributes fields of the
794 * STANDARD_INFORMATION attribute of MFT_RECORDs and the FILENAME_ATTR
798 * appear in the STANDARD_INFORMATION attribute whilst only some others appear
799 * in the FILENAME_ATTR attribute of MFT_RECORDs. Unless otherwise stated the
836 * attribute of an mft record.
841 an index root attribute or not. */
859 * Attribute: Standard information (0x10).
872 /* 8*/ sle64 last_data_change_time; /* Time the data attribute was last
897 * Recognize the difference by comparing the length of the resident attribute
903 * Upgrade attribute to NTFS 3.x format.
941 * Attribute: Attribute list (0x20).
948 * the attribute value size.
949 * - The attribute list attribute contains one entry for each attribute of
950 * the file in which the list is located, except for the list attribute
951 * itself. The list is sorted: first by attribute type, second by attribute
953 * non-resident attribute (if present) immediately follow after the initial
959 * - The attribute list attribute value has a maximum size of 256kb. This
961 * - Attribute lists are only used when the attributes of mft record do not
966 * - The mapping pairs array of some non-resident attribute becomes so
974 /* 0*/ ATTR_TYPE type; /* Type of referenced attribute. */
977 attribute or 0 if unnamed. */
978 /* 7*/ u8 name_offset; /* Byte offset to beginning of attribute name
982 of the attribute value. This is usually 0. It
983 is non-zero for the case where one attribute
986 this attribute. In the latter case, each mft
987 record holds one extent of the attribute and
988 there is one attribute list entry for each
995 attribute value. */
997 attribute being referenced; otherwise 0. */
1043 * Attribute: Filename (0x30).
1049 * information attribute.
1060 /* 10*/ sle64 last_data_change_time; /* Time the data attribute was last
1067 for the unnamed data attribute. So
1070 $DATA attribute and for compressed
1073 $DATA attribute. For a directory or
1075 attribute, this is always 0. NOTE:
1079 data attribute. For a directory or
1081 attribute, this is always 0. */
1146 * Attribute: Object id (NTFS 3.0+) (0x40).
1153 /* The following fields are optional. The attribute value size is 16
1787 * Attribute: Security descriptor (0x50). A standard self-relative security
1793 * from the standard information attribute.
1801 * FILE_Secure contains no unnamed data attribute, i.e. it has zero length. It
1809 * data attribute. The $SII index is sorted by ascending security_id.
1813 * the security descriptor's storage location within the $SDS data attribute.
1821 * descriptor in the $SDS attribute is read from the found $SDH index entry and
1822 * is stored in the $STANDARD_INFORMATION attribute of the file/directory to
1824 * attribute is present in all base mft records (i.e. in all files and
1828 * security_id and is added to the $SDS data attribute. Then, entries
1829 * referencing the this security descriptor in the $SDS data attribute are
1889 * Attribute: Volume name (0x60).
1922 * Attribute: Volume information (0x70).
1937 * Attribute: Data attribute (0x80).
1952 * When index header is in an index root attribute:
1955 root attribute and there is no index allocation
1956 attribute present. */
1958 attribute and/or an index allocation attribute is
1962 * allocation attribute:
1990 /* NOTE: For the index root attribute, the above two numbers are always
1991 equal, as the attribute is resident and it is resized as needed. In
1992 the case of the index allocation attribute the attribute is not
1994 equal the index_block_size specified by the INDEX_ROOT attribute
1995 corresponding to the INDEX_ALLOCATION attribute this INDEX_BLOCK
2002 * Attribute: Index root (0x90).
2010 * is the only attribute describing the directory. When the directory is too
2012 * are present: an index allocation attribute, containing sub-nodes of the B+
2013 * directory tree (see below), and a bitmap attribute, describing which virtual
2014 * cluster numbers (vcns) in the index allocation attribute are in use by an
2021 ATTR_TYPE type; /* Type of the indexed attribute. Is
2029 the index allocation attribute). */
2031 the index allocation attribute), when
2044 * Attribute: Index allocation (0xa0).
2092 reparse point attribute. */
2132 * owner_id, is found in the standard information attribute. The collation rule
2226 * an index root attribute or an index allocation attribute.
2256 /* 16*/ union { /* The key of the indexed attribute. NOTE: Only present
2282 // of the non-resident index allocation attribute). If
2292 * Attribute: Bitmap (0xb0).
2296 * When used in conjunction with the index allocation attribute, each bit
2297 * corresponds to one index block within the index allocation attribute. Thus
2299 * number of clusters in the index allocation attribute.
2349 * Attribute: Reparse point (0xc0).
2361 * Attribute: Extended attribute (EA) information (0xd0).
2378 * Extended attribute flags (8-bit).
2389 * Attribute: Extended attribute (EA) (0xe0).
2393 * Like the attribute list and the index buffer list, the EA attribute value is
2409 * Attribute: Property set (0xf0).
2419 * Attribute: Logged utility stream (0x100).
2423 * Operations on this attribute are logged to the journal ($LogFile) like
2427 * attribute with the name $EFS.