创建everyonefullcontrol的全局事件对象

#include
#include LPVOID BuildRestrictedSD(PSECURITY_DESCRIPTOR pSD)
{DWORD dwAclLength;PSID psidEveryone &＃61; NULL;PACL pDACL &＃61; NULL;BOOL bResult &＃61; FALSE;PACCESS_ALLOWED_ACE pACE &＃61; NULL;SID_IDENTIFIER_AUTHORITY siaWorld &＃61; SECURITY_WORLD_SID_AUTHORITY ;SECURITY_INFORMATION si &＃61; DACL_SECURITY_INFORMATION;__try {// initialize the security descriptorif (!InitializeSecurityDescriptor(pSD, SECURITY_DESCRIPTOR_REVISION)) {__leave;}// obtain a sid for the Authenticated Users Groupif (!AllocateAndInitializeSid(&siaWorld, 1, SECURITY_WORLD_RID, 0, 0, 0, 0, 0, 0, 0, &psidEveryone)) {__leave;}// NOTE:// // The Authenticated Users group includes all user accounts that// have been successfully authenticated by the system. If access// must be restricted to a specific user or group other than // Authenticated Users, the SID can be constructed using the// LookupAccountSid() API based on a user or group name.// calculate the DACL lengthdwAclLength &＃61; sizeof(ACL)// add space for Authenticated Users group ACE&＃43; sizeof(ACCESS_ALLOWED_ACE) - sizeof(DWORD)&＃43; GetLengthSid(psidEveryone);// allocate memory for the DACLpDACL &＃61; (PACL) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, dwAclLength);if (!pDACL) {__leave;}// initialize the DACLif (!InitializeAcl(pDACL, dwAclLength, ACL_REVISION)) {__leave;}// add the Authenticated Users group ACE to the DACL with// GENERIC_READ, GENERIC_WRITE, and GENERIC_EXECUTE accessif (!AddAccessAllowedAce(pDACL, ACL_REVISION,GENERIC_ALL,psidEveryone)) {__leave;}// set the DACL in the security descriptorif (!SetSecurityDescriptorDacl(pSD, TRUE, pDACL, FALSE)) {__leave;}bResult &＃61; TRUE;} __finally {if (psidEveryone) FreeSid(psidEveryone);}if (bResult &＃61;&＃61; FALSE) {if (pDACL) HeapFree(GetProcessHeap(), 0, pDACL);pDACL &＃61; NULL;}return (LPVOID) pDACL;
}// The following function frees memory allocated in the
// BuildRestrictedSD() function
VOID FreeRestrictedSD(LPVOID ptr)
{if (ptr) HeapFree(GetProcessHeap(), 0, ptr);
}int main(int argc,char **argv)
{LPVOID ptr;HANDLE hEvent;SECURITY_ATTRIBUTES sa;SECURITY_DESCRIPTOR sd;sa.nLength &＃61; sizeof(sa);sa.lpSecurityDescriptor &＃61; &sd;sa.bInheritHandle &＃61; FALSE;// build a restricted security descriptorptr &＃61; BuildRestrictedSD(&sd);hEvent &＃61; CreateEvent(&sa,FALSE,FALSE,"Global\\xxxx");FreeRestrictedSD(ptr);if(hEvent){printf("Create event OK \n");}elseprintf("error :%d \n",GetLastError());getchar();return 0;
}