OBJ_KERNEL_HANDLE and PsCreateSystemThread
Hello, what does OBJ_KERNEL_HANDLE do exactly? Does it simply mean that if the handle is created in a non system process context, it cannot be accessed
by usermode code? Or are there other implications as well (.e.g for the registry key DDIs does it guarantee that the handle would be in the system process table, or is it simply the current process handle table)?
For PsCreateSystemThread, the DDK states that:
Drivers for Windows 2000 and Windows 98/Me must only call PsCreateSystemThread from the system process context
Why? Won't a NULL process pointer guarantee that the thread will be created in the system process? Or is it that the DDI cannot work properly in non system process
context? Is there another reason?