David,
* David Fetter (david(at)fetter(dot)org) wrote:
> There are situations where a "default deny" policy is the best fit.
That's certainly true. It's also what we *have*. The only places where
we aren't "default deny" are places where things have been granted to
"public".
Feel free to revoke "public" from the objects in your environment.
Thanks,
Stephen