From 9ff015f770be41f04ca9184e32be02c2db9fae69 Mon Sep 17 00:00:00 2001 From: Eric Kohl Date: Sun, 21 Feb 2021 15:49:06 +0100 Subject: [PATCH] [NTOS:CM] Report key creation to the notify code --- ntoskrnl/config/cmparse.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/ntoskrnl/config/cmparse.c b/ntoskrnl/config/cmparse.c index 872a79619ae..c5376cf083d 100644 --- a/ntoskrnl/config/cmparse.c +++ b/ntoskrnl/config/cmparse.c @@ -379,6 +379,12 @@ CmpDoCreateChild(IN PHHIVE Hive, /* Now that the security descriptor is copied in the hive, we can free the original */ SeDeassignSecurity(&NewDescriptor); + if (NT_SUCCESS(Status)) + { + /* Send notification to registered callbacks */ + CmpReportNotify(Kcb, Hive, Kcb->KeyCell, REG_NOTIFY_CHANGE_NAME); + } + Quickie: /* Check if we got here because of failure */ if (!NT_SUCCESS(Status))