设置权限的问题

[太虚野老]

hEvent[count] = CreateEvent(&sa, TRUE, TRUE, pcwStr);

				//设置对象安全信息
				SECURITY_INFORMATION SecurityInfo = DACL_SECURITY_INFORMATION;
				SE_OBJECT_TYPE ObjectType = SE_KERNEL_OBJECT;
				PSECURITY_DESCRIPTOR pSD = NULL;
				PSID pSidOwner = NULL;
				PSID pSidGroup = NULL;
				PACL pOldDACL = NULL, pNewDACL = NULL;
				GetSecurityInfo(
					hEvent[count], 
					ObjectType,
					SecurityInfo,
					&pSidOwner, 
					&pSidGroup,
					&pOldDACL, 
					NULL,
					&pSD);

				PEXPLICIT_ACCESS_W eaW;
				ULONG test = 1;
				PULONG pcCountOfExplicitEntries = &test;

				GetExplicitEntriesFromAclW(pOldDACL,
					pcCountOfExplicitEntries,
					&eaW);

				(*eaW).grfAccessPermissions = 0x00010003;
				(*eaW).grfAccessMode = REVOKE_ACCESS;
			
				SetEntriesInAclW(1,eaW, pOldDACL, &pNewDACL);
			
				SetSecurityInfo(
					hEvent[count],
					ObjectType,
					SecurityInfo,
					NULL,
					NULL,
					pNewDACL,
					NULL
				);

使用以上代码为什么设置不成功。

[schlafenhamster]

This function does not handle race conditions. If your thread calls this function at the approximate time that another thread changes the object's security descriptor, then this function could fail.

[schlafenhamster]

To set the SACL of an object, the caller must have the SE_SECURITY_NAME privilege enabled.

[zgl7903]

内核驱动？ ZwCreateEvent ？