Intel® Trace Analyzer and Collector User and Reference Guide

ID 767272
Date 3/31/2023
Public
Document Table of Contents

Secure Loading of Dynamic Link Libraries* on Windows* OS

To improve security protections on Microsoft Windows* OS, Intel® Trace Collector provides the enhanced security options for the loading of Dynamic-Link Libraries*. You can enable the secure DLL loading mode, as well as define a set of directories in which the library will attempt to locate an external DLL.

The security options are placed in the HKEY_LOCAL_MACHINE\Software\Intel\ITAC protected Windows* registry key. The location prevents the options from being changed with non-administrative privileges.

SecureDynamicLibraryLoading 

Select the secure DLL loading mode.

Syntax

SecureDynamicLibraryLoading=<value>

Arguments

<value>  Binary indicator
enable | yes 
		 | on | 1
Enable the secure DLL loading mode 
disable | no 
		 | off | 0
Disable the secure DLL loading mode. This is the default value

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecureDynamicLibraryLoading registry entry. Set this entry to enable the secure DLL loading mode.

VT_MPI_DLL and VT_FMPI_DLL

Specify the Intel MPI Library to be used in the secure DLL loading mode.

Syntax

VT_MPI_DLL=<library>
VT_FMPI_DLL=<library>

Arguments

<library> Specify the name of the library to be loaded

Description

In the secure DLL loading mode, the library changes the default-defined set of directories to locate DLLs. Therefore, the current working directory and the directories that are listed in the PATH environment variable may be ignored.  To select a specific MPI library to be loaded, define the VT_MPI_DLL and VT_FMPI_DLL entries of the HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key. Specify the full path to the MPI library.

NOTE:
The VT_MPI_DLL and VT_FMPI_DLL environment variables have no effect in the secure DLL loading mode.

SecurePath

Specify a set of directories to locate an external DLL.

Syntax

SecurePath=<path>[;<path>[...]]

Arguments

<path>
Specify paths to directories. The paths must be separated with a semicolon ;.

Description

Use HKEY_LOCAL_MACHINE\Software\Intel\ITAC registry key to define the SecurePath registry entry. Set this entry to specify a set of directories to locate loaded DLLs in the secure DLL loading mode. Use a safe set of directories instead of some publicly writable directories to avoid insecure library loading.

NOTE:
Use this option if the static tracing library VT*.lib is linked into the executable or if the tracing library is unable to load a DLL in the secure DLL loading mode. The option has no effect if the secure DLL loading mode is turned off.