Secure Loading of Dynamic Link Libraries* on Windows* OS
To improve security protections on Microsoft Windows* OS, Intel® Trace Collector provides the enhanced security options for the loading of Dynamic-Link Libraries*. You can enable the secure DLL loading mode, as well as define a set of directories in which the library will attempt to locate an external DLL.
The security options are placed in the
HKEY_LOCAL_MACHINE\Software\Intel\ITAC
protected Windows* registry key. The location prevents the options from being changed with non-administrative privileges.
SecureDynamicLibraryLoading
Select the secure DLL loading mode.
Syntax
SecureDynamicLibraryLoading=<value>
Arguments
<value> | Binary indicator
|
| Enable the secure DLL loading mode
|
| Disable the secure DLL loading mode. This is the default value
|
Description
Use
HKEY_LOCAL_MACHINE\Software\Intel\ITAC
registry key to define the
SecureDynamicLibraryLoading
registry entry. Set this entry to enable the secure DLL loading mode.
VT_MPI_DLL and VT_FMPI_DLL
Specify the Intel MPI Library to be used in the secure DLL loading mode.
Syntax
VT_MPI_DLL=<library>
VT_FMPI_DLL=<library>
Arguments
<library> | Specify the name of the library to be loaded
|
Description
In the secure DLL loading mode, the library changes the default-defined set of directories to locate DLLs. Therefore, the current working directory and the directories that are listed in the
PATH
environment variable may be ignored. To select a specific MPI library to be loaded, define the
VT_MPI_DLL
and
VT_FMPI_DLL
entries of the
HKEY_LOCAL_MACHINE\Software\Intel\ITAC
registry key. Specify the full path to the MPI library.
The
VT_MPI_DLL
and
VT_FMPI_DLL
environment variables have no effect in the secure DLL loading mode.
SecurePath
Specify a set of directories to locate an external DLL.
Syntax
SecurePath=<path>[;<path>[...]]
Arguments
| Specify paths to directories. The paths must be separated with a semicolon
; |
Description
Use
HKEY_LOCAL_MACHINE\Software\Intel\ITAC
registry key to define the
SecurePath
registry entry. Set this entry to specify a set of directories to locate loaded DLLs in the secure DLL loading mode. Use a safe set of directories instead of some publicly writable directories to avoid insecure library loading.
Use this option if the static tracing library
VT*.lib
is linked into the executable or if the tracing library is unable to load a DLL in the secure DLL loading mode. The option has no effect if the secure DLL loading mode is turned off.