The other route you could take, if protection from a shutdown is the goal,
change the class of the shutdown to Z or S, and donĀ¹t give this priv to
anyone. Use the Set Priv * +Z as part of the shutdown process.

-- 
Robert P. Nix          Mayo Foundation        .~.
RO-OE-5-55             200 First Street SW    /V\
507-284-0844           Rochester, MN 55905   /( )\
-----                                        ^^-^^
"In theory, theory and practice are the same, but
 in practice, theory and practice are different."



On 2/4/10 12:44 PM, "Schuh, Richard" <rsc...@visa.com> wrote:

> It isn't a matter of trust, it is a matter of minimizing the risk of an
> accidental SHUTDOWN. Here MAINT does not have class A; however it does have
> class C. That allows it to use the SET PRIV * +A in order to issue class A
> commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra
> step of the SET PRIV, it heightens the awareness of the person to the fact
> that they now have extraordinary capabilities and responsibilities.
>  
> Regards, 
> Richard Schuh 
> 

Reply via email to