#ifndef _NTOBAPI_H
//
// Private namespaces
//
#if (PHNT_MODE != PHNT_MODE_KERNEL)

/**
 * The OBJECT_BOUNDARY_DESCRIPTOR structure describes the boundary conditions for a private namespace.
 * \remarks The fixed header is 16 bytes and Version must be OBJECT_BOUNDARY_DESCRIPTOR_VERSION (1).
 * Items counts the trailing variable-sized entries; TotalSize covers the complete descriptor.
 * Entry types 1 (name), 2 (SID), and 3 (integrity label) are accepted. At most one name and one integrity
 * label entry are allowed; successive entries are aligned to 8-byte boundaries.
 * ObpCaptureBoundaryDescriptor on x64 requires a user-mode TotalSize
 * from 16 through 32767 (0x7FFF) bytes and a 4-byte-aligned descriptor. Flag bit 0
 * requests adding the effective token's AppContainer SID when applicable. The caller
 * retains ownership; the kernel captures a copy for each create/open request.
 */
typedef struct _OBJECT_BOUNDARY_DESCRIPTOR
{
    ULONG Version;
    ULONG Items;
    ULONG TotalSize;
    union
    {
        ULONG Flags;
        struct
        {
            ULONG AddAppContainerSid : 1;
            ULONG Reserved : 31;
        };
    };
    //OBJECT_BOUNDARY_ENTRY Entries[1];
} OBJECT_BOUNDARY_DESCRIPTOR, *POBJECT_BOUNDARY_DESCRIPTOR;

#endif
#endif
View code on GitHub