Abstract: Providing complete security attributes revocation function in secure OS is required by both multi policy supporting mechanism and Common Criteria, but all the relevant research on this subject are imperfect. Based on the analysis of security attributes revocation in secure OS, a security attributes revocation framework is put forward and implemented in Redflag Secure OS. Especially, the problem of in progress operations revocation is solved by a mechanism based on in progress operations list.