You are paranoid.
But I do agree with the philosophy.
 

-----Original Message-----
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Alan Ackerman
Sent: Tuesday, November 06, 2007 11:05 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Changing privclass of SHUTDOWN


On Tue, 6 Nov 2007 11:27:00 -0500, Jim Bohnsack <[EMAIL PROTECTED]> wrote:

>You might want to put this change in SYSTEM CONFIG as well.  What we use
is:
>
>Modify Command Shutdown IBMclass A Privclasses Z
>
>Over the course of 30 years as a VM sysprog, every VM sysprog who I have
>worked with has shutdown a VM system *ONCE.*  Me too :-[
>
>Jim

1. I have never accidentally shut down a VM system. But then, I don't have
any userids with class A 
(or class D) privileges. It always makes me cringe when I see a userid with
class ABCDEFG. Like 
walking around with a loaded gun in your pocket! 

I have a CLASSA EXEC that issues:

SET PRIVCLAS * +A
CP command
SET PRIVCLAS * -A

when I really need a class A command.

2. We have a mod to CP SHUTDOWN that requires the system name on the
SHUTDOWN command. 
Too many times an operator has shut down the wrong system.

3. We have a VM:Oper macro SHUTSYS that we prefer operators use. It does a
clean shutdown, 
after bring various other things down cleanly. Maybe with the new SIGNAL
SHUTDOWN this is not 
so necessary?

4. I am one of those that prefer the command be the same everywhere. I know
SHUTDOWN is 
dangerous. I hate it when QUIT or END is dangerous.

5. The real problem is that you shouldn't be able to bring a system down
with just a single 
command -- no matter how you spell that command. 

Since at least the 1984 Apple Human Interface Guidelines, it's been expected
that you ask the 
user before you let him/her do something irretreivable. 

Come to  think of it, isn't that the same with XEDIT QUIT and QQUIT
(sometime before 1980)?

Why doesn't CP prompt the operarator:

"Are you sure you want to bring this system down? Your job may be on the
line. Think about it! 

Yes

Are you really, really sure you want to bring this system down?

Yes

Enter your name and Social Security number:

etc.


Alan Ackerman
Alan (dot) Ackerman (at) Bank of America (dot) com 


__________________________________________________________________
<< ella for Spam Control >> has removed VSE-List messages and set aside
VM-List for me
You can use it too - and it's FREE!  http://www.ellaforspam.com

Reply via email to