SUBSYSTEM_INFORMATION_TYPE enumeration (ntddk.h)

Indicates the type of subsystem for a process or thread. This enumeration is used in NtQueryInformationProcess and NtQueryInformationThread calls.

Syntax

typedef enum _SUBSYSTEM_INFORMATION_TYPE {
  SubsystemInformationTypeWin32,
  SubsystemInformationTypeWSL,
  MaxSubsystemInformationType
} SUBSYSTEM_INFORMATION_TYPE, *PSUBSYSTEM_INFORMATION_TYPE;

Constants

SubsystemInformationTypeWin32 The subsystem type for the process or thread is Win32.
SubsystemInformationTypeWSL The subsystem type for the process or thread is Windows Subsystem for Linux (WSL). For this process, these members of the PS_CREATE_NOTIFY_INFO structure are set as follows: The FileObject member is the NTFS file object from LxFs or DriveFs, the file system that is used for interoperability with Windows. The ImageFileName member is the Linux path of the image file. The CommandLine member is the Linux NULL-separated command line. The preceding member values may be NULL.
MaxSubsystemInformationType Reserved.

Requirements

Header	ntddk.h

See also

NtQueryInformationProcess

NtQueryInformationThread