Secure Loading of Dynamic Link Libraries* on Windows* OS

To improve security protections on Microsoft Windows* OS, Intel® Trace Collector provides the enhanced security options for the loading of Dynamic-Link Libraries*. You can enable the secure DLL loading mode, as well as define a set of directories in which the library will attempt to locate an external DLL.

The security options are placed in the HKEY_LOCAL_MACHINE\Software\Intel\ITAC protected Windows* registry key. The location prevents the options from being changed with non-administrative privileges.

SecureDynamicLibraryLoading 

Select the secure DLL loading mode.

Syntax

SecureDynamicLibraryLoading=<value>

Arguments

<value> 

Binary indicator

enable | yes | on | 1

Enable the secure DLL loading mode 

disable | no | off | 0

Disable the secure DLL loading mode. This is the default value

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecureDynamicLibraryLoading registry entry. Set this entry to enable the secure DLL loading mode.

VT_MPI_DLL and VT_FMPI_DLL

Specify the MPI library to be used in the secure DLL loading mode.

Syntax

VT_MPI_DLL=<library>

VT_FMPI_DLL=<library>

Arguments

<library>

Specify the name of the library to be loaded

Description

In the secure DLL loading mode, the library changes the default-defined set of directories to locate DLLs. Therefore, the current working directory and the directories that are listed in the PATH environment variable may be ignored.  To select a specific MPI library to be loaded, define the VT_MPI_DLL and VT_FMPI_DLL entries of the HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key. Specify the full path to the MPI library.

Note

The VT_MPI_DLL and VT_FMPI_DLL environment variables have no effect in the secure DLL loading mode.

SecurePath

Specify a set of directories to locate an external DLL.

Syntax

SecurePath=<path>[;<path>[...]]

Arguments

<path>

Specify paths to directories. The paths must be separated with a semicolon ;.

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecurePath registry entry. Set this entry to specify a set of directories to locate loaded DLLs in the secure DLL loading mode. Use a safe set of directories instead of some publicly writable directories to avoid insecure library loading.

Note

Use this option if the static tracing library VT*.lib is linked into the executable or if the tracing library is unable to load a DLL in the secure DLL loading mode. The option has  no effect if the secure DLL loading mode is turned off.

Nähere Informationen zur Compiler-Optimierung finden Sie in unserem Optimierungshinweis.