On Wednesday, 11/07/2007 at 02:04 EST, "Schuh, Richard" <[EMAIL PROTECTED]> 
wrote:
> Ah, but the administrator does not have to be evil. Careless or trusting
> would suffice.

To deal with ignorance or carelessness, I think you do not need a two-key 
system.  A simple "are you sure?" is sufficient.  One should be able to 
write a CPXLOADed module to handle shutdown requests and do whatever you 
want.  You could put a mark on the wall and then erase it 2 minutes later. 
 (It's not I-tell-you-three-times, but close enough.)

**************************************
* THIS IS PRODUCTION.  ARE YOU SURE? *
* IF SO, ISSUE THE COMMAND AGAIN.    *
* GO AHEAD, PUNK.  MAKE MY DAY.      *
**************************************

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to