/* * Copyright (c) 2004 Security Architects Corporation. All rights reserved. * * Module Name: * * job.h * * Abstract: * * This module defines various types used by job object hooking routines. * * Author: * * Eugene Tsyrklevich 25-Mar-2004 * * Revision History: * * None. */ #ifndef __JOB_H__ #define __JOB_H__ /* * ZwCreateJobObject creates or opens a job object. [NAR] */ typedef NTSTATUS (*fpZwCreateJobObject) ( OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes ); NTSTATUS NTAPI HookedNtCreateJobObject( OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes ); /* * ZwOpenJobObject opens a job object. [NAR] */ typedef NTSTATUS (*fpZwOpenJobObject) ( OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes ); NTSTATUS NTAPI HookedNtOpenJobObject( OUT PHANDLE JobHandle, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes ); BOOLEAN InitJobHooks(); #endif /* __JOB_H__ */