> We will clear up the limit set at the start of th program. This 
 > privilege will move into effective set from permitted set only when needed.

Sure, but note that the only thing that will guard aginst is accidental
use of privileges by trusted code; an exploit will be able to reacquire
anything in your permitted set and do whatever it wants.

-- 
meem

Reply via email to