On Wednesday, 11/07/2007 at 02:04 EST, "Schuh, Richard" <[EMAIL PROTECTED]> wrote: > Ah, but the administrator does not have to be evil. Careless or trusting > would suffice.
To deal with ignorance or carelessness, I think you do not need a two-key system. A simple "are you sure?" is sufficient. One should be able to write a CPXLOADed module to handle shutdown requests and do whatever you want. You could put a mark on the wall and then erase it 2 minutes later. (It's not I-tell-you-three-times, but close enough.) ************************************** * THIS IS PRODUCTION. ARE YOU SURE? * * IF SO, ISSUE THE COMMAND AGAIN. * * GO AHEAD, PUNK. MAKE MY DAY. * ************************************** Alan Altmark z/VM Development IBM Endicott