> ----------
From: xxxxx@osr.com[SMTP:xxxxx@osr.com]
Reply To: xxxxx@lists.osr.com
Sent: Wednesday, September 04, 2002 7:41 PM
To: xxxxx@lists.osr.com
Subject: [ntdev] Re: Passing event notification from driver to
applicationThe issue (on any platform) is that if one creates an object in their
driver
in the context of the system process, the object won’t be accessible
unless
you have admin privs.
I always believed you don’t need admin rights to open event for SYNCHRONIZE
access. Is it correct? If so, isn’t it enough? Why would app need to modify
event state? If it is possible and driver is dependent on this state, it
seems as security hole because any app could change event state and control
driver.
Best regards,
Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]