Hello,

A bogus script of ours was doing

xl shutdown "${VM_NAME}"

but VM_NAME happened to be empty. The effect is to shutdown dom0, i.e.
shut the whole machine without asking for anything!

Molly-guard should trap this too, to make the user have to type the name
of dom0.

Trapping

xl shutdown Domain-0

would probably be useful, though much less probable than

xl shutdown ""

Samuel