[Web-SIG] Grail resurrection
Barry Warsaw
barry at python.org
Fri Nov 14 20:39:31 EST 2003
On Fri, 2003-11-14 at 19:13, Bill Janssen wrote:
> However, I think some of the technology used in Grail was interesting,
> particularly the security classes Bastion and rexec. Both of these
> are disabled in 2.3, because of "known and not readily fixable
> security holes".
I thought it was more the /unknown/ that has us worried. And until
somebody steps forward and owns restricted execution (or whatever it
will look like), that's not likely to change.
-Barry
More information about the Web-SIG
mailing list