[Web-SIG] Grail resurrection

Barry Warsaw barry at python.org
Fri Nov 14 20:39:31 EST 2003


On Fri, 2003-11-14 at 19:13, Bill Janssen wrote:

> However, I think some of the technology used in Grail was interesting,
> particularly the security classes Bastion and rexec.  Both of these
> are disabled in 2.3, because of "known and not readily fixable
> security holes".

I thought it was more the /unknown/ that has us worried.  And until
somebody steps forward and owns restricted execution (or whatever it
will look like), that's not likely to change.

-Barry





More information about the Web-SIG mailing list