4 files changed, 42 insertions, 32 deletions
diff --git a/doc/runit-init.8.html b/doc/runit-init.8.html
index 17fa4bd..c893241 100644
--- a/doc/runit-init.8.html
+++ b/doc/runit-init.8.html
@@ -23,14 +23,16 @@ while the system is up, it must be either called as <B>init 0</B> or <B>init 6:<
 <DT><B>init
 0</B> </DT>
 <DD>tells the Unix process no 1 to shutdown and halt the system. To signal
-<B><I>runit</B>(8)</I> the system halt request, the <I>/etc/runit/reboot</I> file is removed
-and <I>/etc/runit/stopit</I> is touched. Then a CONT signal is sent to <B><I>runit</B>(8)</I>.
-</DD>
+<B><I>runit</B>(8)</I> the system halt request, <B>runit-init</B> removes all permissions of
+the file <I>/etc/runit/reboot</I> (chmod 0), and sets the execute by owner permission
+of the file <I>/etc/runit/stopit</I> (chmod 100). Then a CONT signal is sent to
+<B><I>runit</B>(8)</I>. </DD>
 
 <DT><B>init 6</B> </DT>
-<DD>tells the Unix process no 1 to shutdown and reboot the system. To
-signal <B><I>runit</B>(8)</I> the system reboot request, the <I>/etc/runit/reboot</I> and <I>/etc/runit/stopit</I>
-files are touched. Then a CONT signal is sent to <B><I>runit</B>(8)</I>. </DD>
+<DD>tells the Unix process no 1 to shutdown and reboot the
+system. To signal <B><I>runit</B>(8)</I> the system reboot request, <B>runit-init</B> sets the
+execute by owner permission of the files <I>/etc/runit/reboot</I> and <I>/etc/runit/stopit</I>
+(chmod 100). Then a CONT signal is sent to <B><I>runit</B>(8)</I>. </DD>
 </DL>
 
 <H2><A NAME="sect3">Exit Codes</A></H2>
diff --git a/doc/runit.8.html b/doc/runit.8.html
index 468647d..8286d2d 100644
--- a/doc/runit.8.html
+++ b/doc/runit.8.html
@@ -31,25 +31,27 @@ keyboard request in Stage 2, see below.
 If <B>runit</B> is told to shutdown
 the system, or the Stage 2 returns without errors, it terminates Stage
 2 if it is running, and runs <I>/etc/runit/3</I>. The systems tasks to shutdown
-and halt or reboot are done here. Normally in Stage 3 <I>/etc/runit/3</I> checks
-for the file <I>/etc/runit/reboot</I>. If it exists, the system is rebooted, it
-is halted otherwise. 
+and halt or reboot are done here. If Stage 3 returns, <B>runit</B> checks if the
+file <I>/etc/runit/reboot</I> exists and has the execute by owner permission set.
+If so, the system is rebooted, it's halted otherwise. 
 <H2><A NAME="sect6">Ctrl-alt-del</A></H2>
-If <B>runit</B> receives the ctrl-alt-del keyboard
-request and the file <I>/etc/runit/ctrlaltdel</I> exists, <B>runit</B> runs <I>/etc/runit/ctrlaltdel</I>,
-waits for it to terminate and then sends itself a CONT signal. 
+If <B>runit</B>
+receives the ctrl-alt-del keyboard request and the file <I>/etc/runit/ctrlaltdel</I>
+exists and has the execute by owner permission set, <B>runit</B> runs <I>/etc/runit/ctrlaltdel</I>,
+waits for it to terminate, and then sends itself a CONT signal. 
 <H2><A NAME="sect7">Signals</A></H2>
 <B>runit</B>
 only accepts signals in Stage 2. <P>
 If <B>runit</B> receives a CONT signal and the
-file <I>/etc/runit/stopit</I> exists, <B>runit</B> is told to shutdown the system. <P>
-if
-<B>runit</B> receives an INT signal, a ctrl-alt-del keyboard request is triggered.
-
+file <I>/etc/runit/stopit</I> exists and has the execute by owner permission set,
+<B>runit</B> is told to shutdown the system. <P>
+if <B>runit</B> receives an INT signal, a
+ctrl-alt-del keyboard request is triggered. 
 <H2><A NAME="sect8">See Also</A></H2>
-<I>runit-init(8)</I>, <I>runsvdir(8)</I>, <I>runsv(8)</I>, <I>svwaitdown(8)</I>, <I>svwaitup(8)</I>,
-<I>utmpset(8)</I> <P>
-<I>http://smarden.org/runit/</I> 
+<I>runit-init(8)</I>, <I>runsvdir(8)</I>,
+<I>runsv(8)</I>, <I>svwaitdown(8)</I>, <I>svwaitup(8)</I>, <I>utmpset(8)</I> <P>
+<I>http://smarden.org/runit/</I>
+
 <H2><A NAME="sect9">Author</A></H2>
 Gerrit Pape &lt;pape@smarden.org&gt; <P>
 
diff --git a/man/runit-init.8 b/man/runit-init.8
index 77b06e3..a66ea91 100644
--- a/man/runit-init.8
+++ b/man/runit-init.8
@@ -21,21 +21,26 @@ or
 .B init 0
 tells the Unix process no 1 to shutdown and halt the system. To signal
 .BR runit (8)
-the system halt request, the
+the system halt request,
+.B runit-init
+removes all permissions of the file
 .I /etc/runit/reboot
-file is removed and
+(chmod 0), and sets the execute by owner permission of the file
 .I /etc/runit/stopit
-is touched. Then a CONT signal is sent to
+(chmod 100).
+Then a CONT signal is sent to
 .BR runit (8).
 .TP
 .B init 6
 tells the Unix process no 1 to shutdown and reboot the system. To signal
 .BR runit (8)
-the system reboot request, the
+the system reboot request,
+.B runit-init
+sets the execute by owner permission of the files
 .I /etc/runit/reboot
 and
 .I /etc/runit/stopit
-files are touched. Then a CONT signal is sent to
+(chmod 100). Then a CONT signal is sent to
 .BR runit (8).
 .SH EXIT CODES
 .B runit-init
diff --git a/man/runit.8 b/man/runit.8
index 544502a..ff9ef27 100644
--- a/man/runit.8
+++ b/man/runit.8
@@ -39,21 +39,22 @@ is told to shutdown the system, or the Stage 2 returns without errors, it
 terminates Stage 2 if it is running, and runs
 .IR /etc/runit/3 .
 The systems tasks to shutdown and halt or reboot are done here.
-Normally in Stage 3
-.I /etc/runit/3
-checks for the file
-.IR /etc/runit/reboot .
-If it exists, the system is rebooted, it is halted otherwise.
+If Stage 3 returns,
+.B runit
+checks if the file
+.I /etc/runit/reboot
+exists and has the execute by owner permission set.
+If so, the system is rebooted, it's halted otherwise.
 .SH CTRL-ALT-DEL
 If
 .B runit
 receives the ctrl-alt-del keyboard request and the file
 .I /etc/runit/ctrlaltdel
-exists,
+exists and has the execute by owner permission set,
 .B runit
 runs
 .IR /etc/runit/ctrlaltdel ,
-waits for it to terminate and then sends itself a CONT signal.
+waits for it to terminate, and then sends itself a CONT signal.
 .SH SIGNALS
 .B runit
 only accepts signals in Stage 2.
@@ -62,7 +63,7 @@ If
 .B runit
 receives a CONT signal and the file
 .I /etc/runit/stopit
-exists,
+exists and has the execute by owner permission set,
 .B runit
 is told to shutdown the system.
 .P