From 1c4e44592c397041ea0e446f0c71bc2b9c4f949d Mon Sep 17 00:00:00 2001 From: Pierre Schweitzer Date: Tue, 21 May 2019 08:34:16 +0200 Subject: [PATCH] [NTOSKRNL] Save ProtectionMode value on boot --- ntoskrnl/config/cmdata.c | 2 +- ntoskrnl/include/internal/ob.h | 1 + ntoskrnl/ob/obinit.c | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/ntoskrnl/config/cmdata.c b/ntoskrnl/config/cmdata.c index 9b788b5f461..816dfd28c91 100644 --- a/ntoskrnl/config/cmdata.c +++ b/ntoskrnl/config/cmdata.c @@ -141,7 +141,7 @@ INIT_SECTION CM_SYSTEM_CONTROL_VECTOR CmControlVector[] = { L"Session Manager", L"ProtectionMode", - &DummyData, + &ObpProtectionMode, NULL, NULL }, diff --git a/ntoskrnl/include/internal/ob.h b/ntoskrnl/include/internal/ob.h index 59bd66956c2..ce8c5a0dc75 100644 --- a/ntoskrnl/include/internal/ob.h +++ b/ntoskrnl/include/internal/ob.h @@ -619,6 +619,7 @@ extern UNICODE_STRING ObpDosDevicesShortName; extern WCHAR ObpUnsecureGlobalNamesBuffer[128]; extern ULONG ObpUnsecureGlobalNamesLength; extern ULONG ObpObjectSecurityMode; +extern ULONG ObpProtectionMode; // // Inlined Functions diff --git a/ntoskrnl/ob/obinit.c b/ntoskrnl/ob/obinit.c index fece62e45a3..5ae4e731244 100644 --- a/ntoskrnl/ob/obinit.c +++ b/ntoskrnl/ob/obinit.c @@ -53,6 +53,7 @@ PsInitializeQuotaSystem(VOID); ULONG ObpInitializationPhase; ULONG ObpObjectSecurityMode = 0; +ULONG ObpProtectionMode = 0; /* PRIVATE FUNCTIONS *********************************************************/