Rule Writing Guidelines › Suggested Rules for Sensitive Commands › SHUTDOWN Command

SHUTDOWN Command

The CP SHUTDOWN command lets a class A user end all VM system functions, disable communication lines, checkpoint the system for a warm start, save enabled virtual machines to be saved, and automatically do a warm start. We strongly recommend that you implement command limiting for the SHUTDOWN command on CPUs that do not support POWEROFF. Otherwise, an invalid SHUTDOWN command shuts down the service machine, but CP does not shut down, perhaps resulting in users or the system being hung.

To restrict use of the CP SHUTDOWN command, create a command limiting rule with a $KEY of SHUTDOWN.

$KEY(SHUTDOWN)
 - UID(operator) LOG
 POWEROFF UID(*) PREVENT

Here, only users with the OPERATOR UIDs are allowed SHUTDOWN access to the secured CPU. All such events are logged. Anyone else who attempts to SHUTDOWN this machine is prevented, with the event logged.