On Mon, 08 Jan 2007 17:38:25 EST, Mimi Zohar said: > revoked. Based on previous comments on lkml, we understand > that this is not really possible in general, so SLIM only > attempts to revoke access in certain simple cases.
Which, unfortunately, creates incredibly brittle code when some attacker reads the SLIM source code and finds a way to force the non-simple case you ignore. This is an area where you really need to do it *right*, or not at all.
pgppkxxXIF2hC.pgp
Description: PGP signature
