Visible to Intel only — GUID: GUID-DD78D288-AE43-4B26-9B49-D6382B348258
Visible to Intel only — GUID: GUID-DD78D288-AE43-4B26-9B49-D6382B348258
Secure Loading of Dynamic Link Libraries* on Windows* OS
To improve security protections on Microsoft Windows* OS, Intel® Trace Collector provides the enhanced security options for the loading of Dynamic-Link Libraries*. You can enable the secure DLL loading mode, as well as define a set of directories in which the library will attempt to locate an external DLL.
The security options are placed in the HKEY_LOCAL_MACHINE\Software\Intel\ITAC protected Windows* registry key. The location prevents the options from being changed with non-administrative privileges.
SecureDynamicLibraryLoading
Select the secure DLL loading mode.
Syntax
SecureDynamicLibraryLoading=<value>
Arguments
<value> | Binary indicator |
enable | yes | on | 1 |
Enable the secure DLL loading mode |
disable | no | off | 0 |
Disable the secure DLL loading mode. This is the default value |
Description
Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecureDynamicLibraryLoading registry entry. Set this entry to enable the secure DLL loading mode.
VT_MPI_DLL and VT_FMPI_DLL
Specify the Intel MPI Library to be used in the secure DLL loading mode.
Syntax
VT_MPI_DLL=<library>
VT_FMPI_DLL=<library>
Arguments
<library> | Specify the name of the library to be loaded |
Description
In the secure DLL loading mode, the library changes the default-defined set of directories to locate DLLs. Therefore, the current working directory and the directories that are listed in the PATH environment variable may be ignored. To select a specific MPI library to be loaded, define the VT_MPI_DLL and VT_FMPI_DLL entries of the HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key. Specify the full path to the MPI library.
SecurePath
Specify a set of directories to locate an external DLL.
Syntax
SecurePath=<path>[;<path>[...]]
Arguments
<path> |
Specify paths to directories. The paths must be separated with a semicolon ;. |
Description
Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecurePath registry entry. Set this entry to specify a set of directories to locate loaded DLLs in the secure DLL loading mode. Use a safe set of directories instead of some publicly writable directories to avoid insecure library loading.