Index: /trunk/include/VBox/err.h
===================================================================
--- /trunk/include/VBox/err.h	(revision 33738)
+++ /trunk/include/VBox/err.h	(revision 33739)
@@ -1360,16 +1360,34 @@
 /** The specified path is too long (hardening). */
 #define VERR_SUPLIB_PATH_TOO_LONG                   (-3752)
+/** The specified path is too short (hardening). */
+#define VERR_SUPLIB_PATH_TOO_SHORT                  (-3753)
+/** The specified path has too many components (hardening). */
+#define VERR_SUPLIB_PATH_TOO_MANY_COMPONENTS        (-3754)
 /** The specified path is a root path (hardening). */
-#define VERR_SUPLIB_PATH_IS_ROOT                    (-3753)
+#define VERR_SUPLIB_PATH_IS_ROOT                    (-3755)
 /** Failed to enumerate directory (hardening). */
-#define VERR_SUPLIB_DIR_ENUM_FAILED                 (-3754)
+#define VERR_SUPLIB_DIR_ENUM_FAILED                 (-3756)
 /** Failed to stat a file/dir during enumeration (hardening). */
-#define VERR_SUPLIB_STAT_ENUM_FAILED                (-3755)
+#define VERR_SUPLIB_STAT_ENUM_FAILED                (-3757)
 /** Failed to stat a file/dir (hardening). */
-#define VERR_SUPLIB_STAT_FAILED                     (-3756)
+#define VERR_SUPLIB_STAT_FAILED                     (-3758)
+/** Failed to fstat a native handle (hardening). */
+#define VERR_SUPLIB_FSTAT_FAILED                    (-3759)
 /** Found an illegal symbolic link (hardening). */
-#define VERR_SUPLIB_SYMLINKS_ARE_NOT_PERMITTED      (-3757)
+#define VERR_SUPLIB_SYMLINKS_ARE_NOT_PERMITTED      (-3760)
 /** Found something which isn't a file nor a directory (hardening). */
-#define VERR_SUPLIB_NOT_DIR_NOT_FILE                (-3758)
+#define VERR_SUPLIB_NOT_DIR_NOT_FILE                (-3761)
+/** The specified path is a directory and not a file (hardening). */
+#define VERR_SUPLIB_IS_DIRECTORY                    (-3762)
+/** The specified path is a file and not a directory (hardening). */
+#define VERR_SUPLIB_IS_FILE                         (-3763)
+/** The path is not the same object as the native handle (hardening). */
+#define VERR_SUPLIB_NOT_SAME_OBJECT                 (-3764)
+/** The owner is not root (hardening). */
+#define VERR_SUPLIB_OWNER_NOT_ROOT                  (-3765)
+/** The group is a non-system group and it has write access (hardening). */
+#define VERR_SUPLIB_WRITE_NON_SYS_GROUP             (-3766)
+/** The file or directory is world writable (hardening). */
+#define VERR_SUPLIB_WORLD_WRITABLE                  (-3767)
 /** @} */
 
Index: /trunk/include/VBox/sup.h
===================================================================
--- /trunk/include/VBox/sup.h	(revision 33738)
+++ /trunk/include/VBox/sup.h	(revision 33739)
@@ -985,6 +985,6 @@
  * @param   pszDirPath      The directory path.
  * @param   fRecursive      Whether the check should be recursive or
- *                          not.  When set, all sub-directores will be
- *                          checked.
+ *                          not.  When set, all sub-directores will be checked,
+ *                          including files (@a fCheckFiles is ignored).
  * @param   fCheckFiles     Whether to apply the same basic integrity check to
  *                          the files in the directory as the directory itself.
Index: /trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp
===================================================================
--- /trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp	(revision 33738)
+++ /trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp	(revision 33739)
@@ -67,7 +67,8 @@
 #include <VBox/err.h>
 #include <iprt/asm.h>
-#include <iprt/string.h>
+#include <iprt/ctype.h>
 #include <iprt/param.h>
 #include <iprt/path.h>
+#include <iprt/string.h>
 
 #include "SUPLibInternal.h"