Path: news.mitre.org!blanket.mitre.org!agate!newsgate.duke.edu!nntprelay.mathworks.com!news-peer.gip.net!news-penn.gip.net!news.gsl.net!gip.net!news.NetVision.net.il!not-for-mail
From: "Roman Rutman" <romanr@DELETE-ITmailhost.net>
Newsgroups: comp.os.ms-windows.programmer.nt.kernel-mode
Subject: Re: ZwCreateEvent
Date: Sun, 16 Nov 1997 00:27:40 +0200
Organization: NetVision LTD.
Lines: 28
Message-ID: <64l7jj$o42$3@news.NetVision.net.il>
References: <346a4eed.71062062@news.halcyon.com>
NNTP-Posting-Host: romik-home.softwinter.com
X-Trace: news.NetVision.net.il 879632819 24706 (None) 207.232.21.21
X-Complaints-To: usenet@news.NetVision.net.il
X-Newsreader: Microsoft Outlook Express 4.71.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3

Randy Sales wrote in message <346a4eed.71062062@news.halcyon.com>...
>I need to gain access to the security
>descriptor for a kernel event, just as
>Dave Porter did in an earlier posting.
>I feel I have no choice but to use
>ZwCreateEvent, even though it's
>an undocumented function.  Can
>anyone tell me where to find the
>prototype for this function.


NTSYSAPI
NTSTATUS
ZwCreateEvent (
  OUT PHANDLE HandleOfEvent,
  IN ACCESS_MASK DesiredAccess,
  IN POBJECT_ATTRIBUTES ObjectAttributes OPTIONAL,
  IN EVENT_TYPE TypeOfEvent,
  IN BOOLEAN InitialStateOfEvent
  );

Regards,
Roman Rutman
seNTry 2020 - transparent real-time disk encryption for Windows NT
http://www.softwinter.com