On Dec 8, 2004, at 4:25 PM, Ferguson, Neale wrote:
FORCE may require you to give too many privileges to the virtual machine. You could use SIGNAL SHUTDOWN which is class C (it's class A also I know). You can also change the class of the command to restrict it to a class of its own that the stonith guy belongs to.
True, if you're sure that the machine is running a kernel that respects SIGNAL SHUTDOWN.
I'd specify a new privilege class, myself, for "Linux boxes that have power over other Linux boxes but not over arbitrary SVMs." I mean, for a production site. For just playing with I'd give it more privs than it should have.
Adam
---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
