fix protect
This commit is contained in:
@@ -39,14 +39,15 @@ auto ob_call_back::register_ob_reg_callback() -> NTSTATUS
|
|||||||
|
|
||||||
if (protect_filter::is_protect_pid(HandleToLong(dwPid), nullptr))
|
if (protect_filter::is_protect_pid(HandleToLong(dwPid), nullptr))
|
||||||
{
|
{
|
||||||
//pOperationInformation->Parameters->DuplicateHandleInformation.DesiredAccess = 0;
|
pOperationInformation->Parameters->DuplicateHandleInformation.DesiredAccess = 0;
|
||||||
//pOperationInformation->Parameters->DuplicateHandleInformation.OriginalDesiredAccess = 0;
|
pOperationInformation->Parameters->DuplicateHandleInformation.OriginalDesiredAccess = 0;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
end:
|
end:
|
||||||
return OB_PREOP_SUCCESS;
|
return OB_PREOP_SUCCESS;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
NTSTATUS status;
|
NTSTATUS status;
|
||||||
OB_CALLBACK_REGISTRATION obReg;
|
OB_CALLBACK_REGISTRATION obReg;
|
||||||
OB_OPERATION_REGISTRATION opReg;
|
OB_OPERATION_REGISTRATION opReg;
|
||||||
|
|||||||
Reference in New Issue
Block a user