Re: Security Attributes on a Notification Event creat ed at Kernel level

NTDEV
1

This is just about the point in this thread where PGV will note that you can
just use ZwCreateEvent to specify the security on the event object and then
I will point out that ZwCreateEvent is not documented or published in the
ddk headers.

-----Original Message-----
From: Bill McKenzie [mailto:xxxxx@bsquare.com]
Sent: Friday, May 03, 2002 2:52 PM
To: NT Developers Interest List
Subject: [ntdev] Re: Security Attributes on a Notification
Event creat ed at Kernel level

There are a lot of problems with named events and they should
be avoided if at all possible. A big problem is named events
created in the driver in the context of a process will become
invalid when that process exits as all handles to the event
will be gone. This will completely screw the case you
described with potential multiple unknown clients. If you
create the event in the context of a system process, then
this problem goes away but another
arises:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q228785

So, it should be recommended by MS if it isn’t already, and
anyone else to just not use this approach.

–
Bill McKenzie

“Michal Vodicka” wrote in
> message news:xxxxx@ntdev…
> >
> > > ----------
> > > From: xxxxx@storagecraft.com[SMTP:xxxxx@storagecraft.com]
> > > Reply To: xxxxx@lists.osr.com
> > > Sent: Friday, May 03, 2002 4:27 PM
> > > To: xxxxx@lists.osr.com
> > > Subject: [ntdev] RE: Security Attributes on a Notification Event
> > > created at Kernel level
> > >
> > > Do not use named events. MS have obsoleted this
> technique. Create an
> > > unnamed event in user mode and pass the handle to the driver
> via
> > > IOCTL.
> > >
> > Named events have their use. Start winobj and open BaseNamedObjects
> folder.
> > Suprisingly, there are a lot of named events created by OS. Names
> > indicate their possible use.
> >
> > I would agree if you say using named event for communication between
> coupled
> > app and driver has some drawbacks and there are better
> techniques. But
> > if you for example want to indicate some event for several possibly
> > unknown clients, named notification event can be used with
> advangate.
> >
> > I guess original poster didn’t say why want to use named
> event and may
> > has
> a
> > good reason.
> >
> > Best regards,
> >
> > Michal Vodicka
> > STMicroelectronics Design and Application s.r.o.
> > [michal.vodicka@st.com, http:://www.st.com]
> >
> >
> >
> >
> >
>
>
>
> —
> You are currently subscribed to ntdev as:
> xxxxx@stratus.com To unsubscribe send a blank email to
> %%email.unsub%%
>