Intel® Trace Analyzer and Collector User and Reference Guide

ID 767272
Date 8/08/2022
Public

A newer version of this document is available. Customers should click here to go to the newest version.

Document Table of Contents

Secure Loading of Dynamic Link Libraries* on Windows* OS

To improve security protections on Microsoft Windows* OS, Intel® Trace Collector provides the enhanced security options for the loading of Dynamic-Link Libraries*. You can enable the secure DLL loading mode, as well as define a set of directories in which the library will attempt to locate an external DLL.

The security options are placed in the HKEY_LOCAL_MACHINE\Software\Intel\ITAC protected Windows* registry key. The location prevents the options from being changed with non-administrative privileges.

SecureDynamicLibraryLoading 

Select the secure DLL loading mode.

Syntax

SecureDynamicLibraryLoading=<value>

Arguments

<value>  Binary indicator
enable | yes 
		 | on | 1
Enable the secure DLL loading mode 
disable | no 
		 | off | 0
Disable the secure DLL loading mode. This is the default value

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecureDynamicLibraryLoading registry entry. Set this entry to enable the secure DLL loading mode.

VT_MPI_DLL and VT_FMPI_DLL

Specify the Intel MPI Library to be used in the secure DLL loading mode.

Syntax

VT_MPI_DLL=<library>
VT_FMPI_DLL=<library>

Arguments

<library> Specify the name of the library to be loaded

Description

In the secure DLL loading mode, the library changes the default-defined set of directories to locate DLLs. Therefore, the current working directory and the directories that are listed in the PATH environment variable may be ignored.  To select a specific MPI library to be loaded, define the VT_MPI_DLL and VT_FMPI_DLL entries of the HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key. Specify the full path to the MPI library.

NOTE:
The VT_MPI_DLL and VT_FMPI_DLL environment variables have no effect in the secure DLL loading mode.

SecurePath

Specify a set of directories to locate an external DLL.

Syntax

SecurePath=<path>[;<path>[...]]

Arguments

<path>
Specify paths to directories. The paths must be separated with a semicolon ;.

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecurePath registry entry. Set this entry to specify a set of directories to locate loaded DLLs in the secure DLL loading mode. Use a safe set of directories instead of some publicly writable directories to avoid insecure library loading.

NOTE:
Use this option if the static tracing library VT*.lib is linked into the executable or if the tracing library is unable to load a DLL in the secure DLL loading mode. The option has no effect if the secure DLL loading mode is turned off.

Did you find the information on this page useful?

Characters remaining:

Feedback Message