creating private page in kernel mode

NTDEV
1

Hello all!
I have shared image map, for example, kernel32.dll.
If a process in user mode set PAGE_READWRITE | PAGE_WRITECOPY on
some page on that image (with call VirtualProtect) and than
write to it. A memory managers creates a private page and
all modification are visible only on that process.

So, I want to do like that, but from kernel mode. How to do that?
Please, help me.
Thanks!

–
Best regards,
Agile.

2

> So, I want to do like that, but from kernel mode. How to do that?

Can be not possible at all. At least some CPUs do not honor the read/only PTE
bit if the access was from kernel mode and the PTE has “kernel access allowed”
bit.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com