Also I think it's better to do a little bit more and forward them to ntdll Rtl* calls, like some existing calls already do, it's safe to assume prototype are the same between the two.
Hi Nicolai, RtlAddAuditAccessObjectAce and other are still not implemented in ntdll (and ntdll.spec)
Am i right that you suggest to write the stubs for Rtl* in ntdll, and then forward advapi32 calls to Rtl* functions?
Regards
Louis
On Friday, 19 February 2016, Louis Lenders xerox.xerox2000x@gmail.com wrote:
Also I think it's better to do a little bit more and forward them to ntdll Rtl* calls, like some existing calls already do, it's safe to assume prototype are the same between the two.
Hi Nicolai, RtlAddAuditAccessObjectAce and other are still not implemented in ntdll (and ntdll.spec)
Am i right that you suggest to write the stubs for Rtl* in ntdll, and then forward advapi32 calls to Rtl* functions?
Yes, same way existing AddAudit* functions do.
Regards
Louis