Fault-tolerant supervisory control under C, D observability and its application