[NTOSKRNL]

Fix a fixme in IopParseDevice() by calling SeOpenObjectAuditAlarm().
Won't change anything right now since it calls a stub.

svn path=/trunk/; revision=58226
This commit is contained in:
Pierre Schweitzer 2013-01-26 17:29:18 +00:00
parent 94bb4b7aaf
commit 6e0c97bcbe

View file

@ -196,6 +196,7 @@ IopParseDevice(IN PVOID ParseObject,
ACCESS_MASK DesiredAccess, GrantedAccess;
BOOLEAN AccessGranted, LockHeld = FALSE;
PPRIVILEGE_SET Privileges = NULL;
UNICODE_STRING FileString;
IOTRACE(IO_FILE_DEBUG, "ParseObject: %p. RemainingName: %wZ\n",
ParseObject, RemainingName);
@ -309,7 +310,20 @@ IopParseDevice(IN PVOID ParseObject,
OpenPacket->Override= TRUE;
}
/* FIXME: Do Audit/Alarm for open operation */
FileString.Length = 8;
FileString.MaximumLength = 8;
FileString.Buffer = L"File";
/* Do Audit/Alarm for open operation */
SeOpenObjectAuditAlarm(&FileString,
OriginalDeviceObject,
CompleteName,
OriginalDeviceObject->SecurityDescriptor,
AccessState,
FALSE,
AccessGranted,
UserMode,
&AccessState->GenerateOnClose);
}
else
{