Secure Loading of Dynamic Link Libraries* on Windows* OS

To improve security protections on Microsoft Windows* OS, Intel® Trace Collector provides the enhanced security options for the loading of Dynamic-Link Libraries*. You can enable the secure DLL loading mode, as well as define a set of directories in which the library will attempt to locate an external DLL.

The security options are placed in the HKEY_LOCAL_MACHINE\Software\Intel\ITAC protected Windows* registry key. The location prevents the options from being changed with non-administrative privileges.

SecureDynamicLibraryLoading 

Select the secure DLL loading mode.

Syntax

SecureDynamicLibraryLoading=<value>

Arguments

<value> 

Binary indicator

enable | yes | on | 1

Enable the secure DLL loading mode 

disable | no | off | 0

Disable the secure DLL loading mode. This is the default value

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecureDynamicLibraryLoading registry entry. Set this entry to enable the secure DLL loading mode.

VT_MPI_DLL and VT_FMPI_DLL

Specify the MPI library to be used in the secure DLL loading mode.

Syntax

VT_MPI_DLL=<library>

VT_FMPI_DLL=<library>

Arguments

<library>

Specify the name of the library to be loaded

Description

In the secure DLL loading mode, the library changes the default-defined set of directories to locate DLLs. Therefore, the current working directory and the directories that are listed in the PATH environment variable may be ignored.  To select a specific MPI library to be loaded, define the VT_MPI_DLL and VT_FMPI_DLL entries of the HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key. Specify the full path to the MPI library.

Note

The VT_MPI_DLL and VT_FMPI_DLL environment variables have no effect in the secure DLL loading mode.

SecurePath

Specify a set of directories to locate an external DLL.

Syntax

SecurePath=<path>[;<path>[...]]

Arguments

<path>

Specify paths to directories. The paths must be separated with a semicolon ;.

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecurePath registry entry. Set this entry to specify a set of directories to locate loaded DLLs in the secure DLL loading mode. Use a safe set of directories instead of some publicly writable directories to avoid insecure library loading.

Note

Use this option if the static tracing library VT*.lib is linked into the executable or if the tracing library is unable to load a DLL in the secure DLL loading mode. The option has  no effect if the secure DLL loading mode is turned off.

For more complete information about compiler optimizations, see our Optimization Notice.