SetKernelObjectSecurity - Win32 Programmer's Reference (win32.hlp)

Overview

Group

Quick Info

Windows NT
Yes
Win95
No
Win32s
No
Import Library
advapi32.lib
Header File
winbase.h
Unicode
No
Platform Notes
None

SetKernelObjectSecurity

The SetKernelObjectSecurity function sets the security of a kernel object. For example, this can be a process, thread, or event.

BOOL SetKernelObjectSecurity(

HANDLE Handle,	// handle of object
SECURITY_INFORMATION SecurityInformation,	// type of information to set
PSECURITY_DESCRIPTOR SecurityDescriptor	// address of security descriptor
);

Parameters
Handle

Identifies a kernel object for which security information is set.

SecurityInformation

Specifies a SECURITY_INFORMATION structure identifying the contents of the security descriptor pointed to by the SecurityDescriptor parameter.

SecurityDescriptor

Points to a SECURITY_DESCRIPTOR structure containing the new security information.

Return Values
If the function succeeds, the return value is nonzero.

If the function fails, the return value is zero. To get extended error information, call GetLastError.

Remarks
The SetKernelObjectSecurity function is successful only if the following conditions are met:

If the object's owner is being set, the calling process must have either WRITE_OWNER permission or be the object's owner.
If the object's discretionary access-control list (ACL) is being set, the calling process must have either WRITE_DAC permission or be the object's owner.
If the object's system ACL is being set, the SE_SECURITY_NAME privilege must be enabled for the calling process.

More Online Helps