Jonathan Rees wrote a dissertation on implementing a Security Kernel in Lisp. This paper is an overview of his full thesis. I have taken the postscript version and made an HTML file. You can access it through http://www.eval-apply.com/LispOS/prior.htm ~jrm