DOCSLIB.ORG

Linux Network Security Access & Monitoring Service Tools

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Linux Network Security Access & Monitoring Service Tools Special Issue - 2015 International Journal of Engineering Research & Technology (IJERT) ISSN: 2278-0181 NCETEMS-2015 Conference Proceedings Linux Network Security Access & Monitoring Service Tools Mahesh Kumar 1 1 Department of Computer Science & Engineering, Ganga Institute of Technology and Management, Kablana, Jhajjar, Haryana, INDIA Abstract--It has been recognized that securing applications is resources can be controlled for those who need them and only half of the battle: a computer system must also employ denied to others. security policies at the OS level, and the current model of user vs. administrator that we find in standard Unix is insufficient. The ability for a user to access a machine is determined by For the basic security features, Linux has password whether or not that user's account exists. Access to an authentication, file system discretionary access control, and application or file is granted based on the permission settings security auditing. These three fundamental features are for the file. This helps to ensure the integrity of sensitive necessary to achieve a security evaluation at the C2 level [4]. information and key resources against accidental or Most commercial server-level operating systems, including AIX purposeful damage by users. (IBM), Windows NT, and Solaris, have been certified to this C2 level. Generally speaking workstations/servers are used by After a normal user account is created, the user can log into people that don't really care about the underlying technology, the system and access any applications or files they are they just want to get their work done and retrieve their email in permitted to access. Linux determines whether or not a user a timely fashion. There are however many users that will have or group can access these resources based on the permissions the ability to modify their workstation, for better or worse (install packet sniffers, warez ftp sites, www servers, irc bots, assigned to them. etc). To add to this most users have physical access to their There are three permissions for files, directories, and workstations, meaning you really have to lock them down if you applications. Table 1 lists the symbols used to indicate each want to do it right. of them. Each of the three permissions is assigned to three Keywords:- Security, Linux OS, Server, Security, monitoring tool defined categories of users. The categories are listed in Table 2. I. INTRODUCTION TABLE 1. By expanding the basic standard security features we have: Permission character symbols User and group separation Symbol Description File system security r Indicates that a given category of user can read a file. Audit trails w Indicates that a given category of user can write to a file. PAM authentication Indicates that a given category of user can execute the x A. User and Group Separation file. User accounts are used to verify the identity of the person - A fourth symbol indicates that no access is permitted. using a computer system. By checking the identity of a user TABLE 2. through username and password credentials, the system is able to determine if the user is permitted to log into the PERMISSION CATEGORIES system and, if so, which resources the user is allowed to Category Description access. Owner The owner of the file or application. Groups are logical constructs that can be used to group user The group that owns the file or accounts together for a particular purpose. For example, if a Group company has a group of system administrators, they can all application. be placed in a system administrator group with permission to Everyone All users with access to the system. access key resources of the OS. In addition, through group creation and assignment of privileges, access to restricted One can easily view the permissions for a file by invoking a long format listing using the command ls -l. Volume 3, Issue 10 Published by, www.ijert.org 1 Special Issue - 2015 International Journal of Engineering Research & Technology (IJERT) ISSN: 2278-0181 NCETEMS-2015 Conference Proceedings For instance, if the user kambing creates an executable TABLE 3. file named foo, the output of the command ls -l foo FILE TYPES CHARACTER SYMBOLS would look something like this: Symbol Meaning -rwxrwxr-x 1 kambing kambing 0 Sep 2 12:25 foo - Regular file The permissions for this file are listed at the start of d Directory the line, starting with set of rwx. l Link This first set of symbols defines owner access. c Special file The next set of rwx symbols define group access, s Socket The last set of symbols defining access p Named pipe permitted for all other users. b Block device This listing indicates that the file is readable, writable, and executable by the user who owns the file (user On Linux system, every file is owned by a user and a group kambing) as well as the group owning the file (which is user. There is also a third category of users, those that are not a group named kambing). The file is also world- the user owner and don't belong to the group owning the file. readable and world-executable, but not world-writable. For each category of users, read, write and execute permissions can be granted or denied. The long option to list files using the ls -l command, also II. FILE SYSTEM SECURITY displays file permissions for these three user categories; they are indicated by the nine characters that follow the first character, which is the file type indicator at the beginning of A very true statement of a UNIX/Linux system, the file properties line. As seen in the following examples, everything is a file; if something is not a file, it is a the first three characters in this series of nine display access process. Most files are just files, called regular files; rights for the actual user that owns the file. they contain normal data, for example text files, executable files or programs, input to or output from a ls -l Mine program and so on. While it is practically safe to say -rw-rw-r-- 1 mike users 5 Jul 15 12:39 Mine that everything you encounter on a Linux system is a file, there are some exceptions as listed below: ls -l /bin/ls Directories: files that are lists of other files. -rwxr-xr-x 1 root root 45948 Aug 10 15:01 /bin/ls* Special files: the mechanism used for input The next three are for the group owner of the file, the last and output. Most special files are in /dev for three for other users. The permissions are always in the same example USB and CD-ROM. order: read, write, execute for the user, the group and the others. The first file is a regular file (first dash). Users with Links: a system to make a file or directory user name mike or users belonging to the group users can visible in multiple parts of the system's file read and write (change/move/delete) the file, but they can't tree. It is a shortcut. execute it (second and third dash). All other users are only allowed to read this file, but they can't write or execute it (Domain) sockets: a special file type, similar to TCP/IP sockets, providing inter-process (fourth and fifth dash). networking protected by the file system's The second example is an executable file, the difference is access control. everybody can run this program, but you need to be root to change it. Named pipes: act more or less like sockets and form a way for processes to communicate For easy use with commands, both access rights or modes with each other, without using network socket and user groups have a code shown in Table 4 and 5. semantics. The following table gives an overview of the characters determining the file type: Volume 3, Issue 10 Published by, www.ijert.org 2 Special Issue - 2015 International Journal of Engineering Research & Technology (IJERT) ISSN: 2278-0181 NCETEMS-2015 Conference Proceedings TABLE 4. allowed. The following is another example, which makes the ACCESS MODE CODES file from the previous example a private file to user mike: Code Meaning >chmod u+rwx,go-rwx hello The access right that is supposed to be on this place is not >ls -l hello 0 or - granted. -rwx------ 1 mike mike 32 Jan 15 16:29 hello* read access is granted to the user category defined in this 4 or r place If you encounter problems resulting in an error message saying that permission is denied, it is usually a problem with 2 or write permission is granted to the user category defined in access rights in most cases. w this place When using chmod with numeric arguments, the values for execute permission is granted to the user category defined 1 or x each granted access right have to be counted together per in this place group. Thus we get a 3-digit number, which is the symbolic value for the settings chmod has to make. The following table lists the most common combinations: TABLE 5. TABLE 5. USER GROUP CODES FILE PROTECTION WITH CHMOD Code Meaning Command Meaning u user permissions To protect a file against accidental g group permissions chmod 400 file overwriting. o permissions for others chmod 500 To protect you from accidentally removing, This straight forward scheme is applied very strictly, which directory renaming or moving files from this directory. allows a high level of security even without network security. A private file only changeable by the user Chmod 600 file Among other functions, the security scheme takes care of who entered this command.
Load more

Recommended publications
  • Real-Time Performance During CUDA™ a Demonstration and Analysis of Redhawk™ CUDA RT Optimizations
    A Concurrent Real-Time White Paper 2881 Gateway Drive Pompano Beach, FL 33069 (954) 974-1700 real-time.ccur.com Real-Time Performance During CUDA™ A Demonstration and Analysis of RedHawk™ CUDA RT Optimizations By: Concurrent Real-Time Linux® Development Team November 2010 Overview There are many challenges to creating a real-time Linux distribution that provides guaranteed low process-dispatch latencies and minimal process run-time jitter. Concurrent Computer Corporation’s RedHawk Linux distribution meets and exceeds these challenges, providing a hard real-time environment on many qualified hardware configurations, even in the presence of a heavy system load. However, there are additional challenges faced when guaranteeing real-time performance of processes while CUDA applications are simultaneously running on the system. The proprietary CUDA driver supplied by NVIDIA® frequently makes demands upon kernel resources that can dramatically impact real-time performance. This paper discusses a demonstration application developed by Concurrent to illustrate that RedHawk Linux kernel optimizations allow hard real-time performance guarantees to be preserved even while demanding CUDA applications are running. The test results will show how RedHawk performance compares to CentOS performance running the same application. The design and implementation details of the demonstration application are also discussed in this paper. Demonstration This demonstration features two selectable real-time test modes: 1. Jitter Mode: measure and graph the run-time jitter of a real-time process 2. PDL Mode: measure and graph the process-dispatch latency of a real-time process While the demonstration is running, it is possible to switch between these different modes at any time.
    [Show full text]
  • Linux Low-Latency Tracing for Multicore Hard Real-Time Systems
    Hindawi Publishing Corporation Advances in Computer Engineering Volume 2015, Article ID 261094, 8 pages http://dx.doi.org/10.1155/2015/261094 Research Article Linux Low-Latency Tracing for Multicore Hard Real-Time Systems Raphaël Beamonte and Michel R. Dagenais Computer and Software Engineering Department, Polytechnique Montreal, C.P. 6079, Station Downtown, Montreal,´ QC,CanadaH3C3A7 Correspondence should be addressed to Raphael¨ Beamonte; [email protected] Received 29 March 2015; Revised 21 July 2015; Accepted 29 July 2015 Academic Editor: Ying-Tung Hsiao Copyright © 2015 R. Beamonte and M. R. Dagenais. This is an open access article distributed under the Creative Commons Attribution License, which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited. Real-time systems have always been difficult to monitor and debug because of the timing constraints which rule out anytool significantly impacting the system latency and performance. Tracing is often the most reliable tool available for studying real-time systems. The real-time behavior of Linux systems has improved recently and it is possible to have latencies in the low microsecond range. Therefore, tracers must ensure that their overhead is within that range and predictable and scales well to multiple cores. The LTTng 2.0 tools have been optimized for multicore performance, scalability, and flexibility. We used and extended the real-time verification tool rteval to study the impact of LTTng on the maximum latency on hard real-time applications. We introduced a new real-time analysis tool to establish the baseline of real-time system performance and then to measure the impact added by tracing the kernel and userspace (UST) with LTTng.
    [Show full text]
  • Tracing and Sampling for Real-Time Partially Simulated Avionics Systems
    Tracing and Sampling for Real-Time partially simulated Avionics Systems Raphaël Beamonte Michel Dagenais Computer and Software Engineering Department École Polytechnique de Montréal C.P.6079, Station Downtown, Montréal, Québec, Canada, H3C 3A7 DORSAL Project Meeting December 5, 2012 Introduction Tracing: Study runtime behavior Can be used to measure latency = fundamental for RT debug Tracer requirements: Low-overhead Consistant maximum latency Contribution: Methodology and tool to measure real-time latencies (NPT) Application of NPT to measure LTTng-UST latency Improvements to the real-time behavior of LTTng Raphaël Beamonte – 2012 (CC BY-SA) Tracing and Sampling for RT Systems 1 / 24 Table of Contents 1 Research Context Real-Time Operating Systems The Linux Tracing Toolkit next-generation, LTTng 2 Test environment Presentation of the test environment System verification 3 Baseline results The Non-Preempt Test tool Latency results 4 Improving LTTng added latency Identify the source of the latency Latency results and comparison Raphaël Beamonte – 2012 (CC BY-SA) Tracing and Sampling for RT Systems 2 / 24 Research Context Test environment Real-Time Operating Systems Baseline results The Linux Tracing Toolkit next-generation, LTTng Improving LTTng added latency RTOS: Xenomai vs. Linux Xenomai: ADEOS thin-kernel Interrupt management – non-RT cannot preempt RT Hard Real Time ? Espace utilisateur (User-space) (Tâches non-temps réel) RT and non-RT tasks are independent Full Linux platform ? Noyau Linux (Non-temps réel) Tâches temps réel Micro-noyau (Thin-kernel) Couche matérielle (Hardware) Raphaël Beamonte – 2012 (CC BY-SA) Tracing and Sampling for RT Systems 3 / 24 Research Context Test environment Real-Time Operating Systems Baseline results The Linux Tracing Toolkit next-generation, LTTng Improving LTTng added latency RTOS: Xenomai vs.
    [Show full text]
  • Building Embedded Linux Systems ,Roadmap.18084 Page Ii Wednesday, August 6, 2008 9:05 AM
    Building Embedded Linux Systems ,roadmap.18084 Page ii Wednesday, August 6, 2008 9:05 AM Other Linux resources from O’Reilly Related titles Designing Embedded Programming Embedded Hardware Systems Linux Device Drivers Running Linux Linux in a Nutshell Understanding the Linux Linux Network Adminis- Kernel trator’s Guide Linux Books linux.oreilly.com is a complete catalog of O’Reilly’s books on Resource Center Linux and Unix and related technologies, including sample chapters and code examples. ONLamp.com is the premier site for the open source web plat- form: Linux, Apache, MySQL, and either Perl, Python, or PHP. Conferences O’Reilly brings diverse innovators together to nurture the ideas that spark revolutionary industries. We specialize in document- ing the latest tools and systems, translating the innovator’s knowledge into useful skills for those in the trenches. Visit con- ferences.oreilly.com for our upcoming events. Safari Bookshelf (safari.oreilly.com) is the premier online refer- ence library for programmers and IT professionals. Conduct searches across more than 1,000 books. Subscribers can zero in on answers to time-critical questions in a matter of seconds. Read the books on your Bookshelf from cover to cover or sim- ply flip to the page you need. Try it today for free. main.title Page iii Monday, May 19, 2008 11:21 AM SECOND EDITION Building Embedded Linux SystemsTomcat ™ The Definitive Guide Karim Yaghmour, JonJason Masters, Brittain Gilad and Ben-Yossef, Ian F. Darwin and Philippe Gerum Beijing • Cambridge • Farnham • Köln • Sebastopol • Taipei • Tokyo Building Embedded Linux Systems, Second Edition by Karim Yaghmour, Jon Masters, Gilad Ben-Yossef, and Philippe Gerum Copyright © 2008 Karim Yaghmour and Jon Masters.
    [Show full text]
  • CPU Shielding Final
    CPU Shielding: Investigating Real-Time Guarantees via Resource Partitioning Progress Report 2 John Scott Tillman [email protected] CSC714 Real-Time Computer Systems North Carolina State University Instructor: Dr. Frank Mueller Project URL: http://www4.ncsu.edu/~jstillma/csc714/ OVERVIEW This project is investigating the feasibility and limitations of using CPU shielding to allow hard real-time operation in commercial, off-the-shelf (COTS) systems. By theoretically bounding and experimentally verifying worst case interrupt response times (CPU contention), worst case bus reaction times (bus contention), and worst case slowdown associated with additional cache misses (cache contention). The goal is to verify the models/predictions and evaluate the predictability that can be achieved using this co-hosting method. TEST SYSTEM SETUP The system being tested contains an AMD Athlon x2 +3800 processor. This dual core processor contains a 512K L2 cache per core [6]. This limits cache contention effects under CPU shielding, but should still exhibit FSB contention. This property places this contention in the same category as all other external device DMA and can be considered using the techniques from [4]. The test system uses a standard Linux kernel (2.6.25). A variety of CPU affinity control methods exist for processes, but for our purposes the system call sched_setaffinity is ideal (see also cpu sets). A utility was written which moves all existing processes away from the second CPU. The shield utility does not continuously monitor these affinity masks, but it will restore them when it is exited. There is no documented way to monitor for new process creation in linux, however, new processes will inherit the affinity mask of their parent process (they can, themselves call sched_setaffinity to override it though).
    [Show full text]
  • What's New in SUSE® Linux Enterprise 11
    Technical White Paper www.novell.com What’s New in SUSE® Linux Enterprise 11 Table of Contents Table of Contents ................................................................................................................................................... 2 Summary ................................................................................................................................................................ 3 Manageability and Supportability ............................................................................................................................ 6 Serviceability ......................................................................................................................................................... 11 Virtualization ......................................................................................................................................................... 13 Security ................................................................................................................................................................. 15 Storage ................................................................................................................................................................. 17 Performance and Scalability ................................................................................................................................. 19 Network ................................................................................................................................................................
    [Show full text]
  • Redhawk Linux User's Guide
    RedHawkTM Linux® User’s Guide 0898004-300 April 2003 Copyright 2002 by Concurrent Computer Corporation. All rights reserved. This publication or any part thereof is intended for use with Concurrent products by Concurrent personnel, customers, and end–users. It may not be repro- duced in any form without the written permission of the publisher. The information contained in this document is believed to be correct at the time of publication. It is subject to change without notice. Concurrent makes no warranties, expressed or implied, concerning the information contained in this document. To report an error or comment on a specific portion of the manual, photocopy the page in question and mark the cor- rection or comment on the copy. Mail the copy (and any additional comments) to Concurrent Computer Corporation, 2881 Gateway Drive, Pompano Beach, Florida, 33069. Mark the envelope “Attention: Publications Department.” This publication may not be reproduced for any other reason in any form without written permission of the publisher. Linux is a registered trademark of Linus Torvalds. Red Hat is a registered trademark of Red Hat, Inc. RedHawk, iHawk, NightStar, NightTrace, NightSim, NightProbe and NightView are trademarks of Concurrent Com- puter Corporation. POSIX is a registered trademark of the Institute of Electrical and Electronics Engineers, Inc. The X Window System is a trademark of The Open Group. OSF/Motif is a registered trademark of the Open Software Foundation, Inc. Ethernet is a trademark of the Xerox Corporation. NFS is a trademark of Sun Microsystems, Inc. Other products mentioned in this document are trademarks, registered trademarks, or trade names of the manufacturers or marketers of the product with which the marks or names are associated.
    [Show full text]
  • “Infectious” Open Source Software: Spreading Incentives Or Promoting Resistance?
    “INFECTIOUS” OPEN SOURCE SOFTWARE: SPREADING INCENTIVES OR PROMOTING RESISTANCE? Greg R. Vetter* ABSTRACT Some free or open source software infects other software with its licensing terms. Popularly, this is called a viral license, but the software is not a computer virus. Free or open source software is a copyright-based licensing system. It typically allows modification and distribution on conditions such as source code availability, royalty free use and other requirements. Some licenses require distribution of modifications under the same terms. A license is infectious when it has a strong scope for the modifications provision. The scope arises from a broad conception of software derivative works. A strong infectious ambit would apply itself to modified software, and to software intermixed or coupled with non-open-source software. Popular open source software, including the * Assistant Professor of Law, University of Houston Law Center (UHLC); Co-Director, Institute for Intellectual Property and Information Law (IPIL) at UHLC; biography and additional background available at: www.law.uh.edu/faculty/gvetter. Relevant to this Article is that my background includes a Master’s degree in Computer Science and full-time work experience in the business-to-business software industry from 1987 to 1996. Research for this Article was supported by summer research grants from the University of Houston Law Foundation and a grant from the University of Houston’s New Faculty Research Program. I also thank UHLC’s IPIL Institute and its sponsors for support of my endeavors at UHLC. My thanks to UHLC students Jason Williams, Cuong Lam Nguyen, Stacey R. Vause and Nivine Zakhari for research assistance.
    [Show full text]
  • The Journal of AUUG Inc. Volume 24 ¯ Number 1 March 2003
    The Journal of AUUG Inc. Volume 24 ¯ Number 1 March 2003 Features: Online Backup using SDS 8 DNSTRACER: Exploring the DNS infrastructure 10 ’Busy Tone’ for CGI Web Applications 12 GridBus: A toolkit for service-oriented grid computing 15 (X) Dialog: Talking Shells 17 Meeting C# and MONO 20 Mozilla Dissected 23 Process Tracing using ptrace part 3 27 Concurrent Programming - Principles and introduction to processes 29 Using the Logical Volume Manager 32 Intrusion Detection with Debian GNU/Linux 35 Shielded Processors: Guaranteeing sub-millisecond response in Standard Linux 38 Fighting against Spam Mail 44 Making a Multiple-Boot CD 48 Why Free Software’s Long Run TCO must be lower 51 News: Public Notices 7 AUUG: Corporate Members 10 NOIE’s Open Source Seminar 5 Another Perspective of the NOIE event 6 AUUG Election Procedures 58 AUUG: Chapter Meetings and Contact Details 62 Regulars: President’s. Column 3 /var/spool/mail/auugn 4 This Quater’s CD: OpenOffice 1.0.2 5 AUUGN Book Reviews 7 ISSN 1035-752 Print post approved by Australia Post - PP2391500002 AUUG Membership and General Correspondence The AUUG Secretary AUUG Inc Editorial PO Box 7071 Con Zymaris <auu_qn(~.auu_q.or_cl.au> Baulkham Hills BC NSW 2153 Telephone: 02 8824 9511 To those of us ensconced within the technical realms or 1800 625 655 (Toll-Free) Facsimile: 02 8824 9522 of our industry, economics, or the ’dismal science’ as Email: [email protected] it’s often belittled, nary merits a moment’s thought during a day filled with debugging shell-scripts and AUUG Management Committee scanning log files.
    [Show full text]
  • Comparative Analysis of Institutions, Economics and Law (IEL)
    POLITECNICO DI TORINO Repository ISTITUZIONALE SOFTWARE INTEROPERABILITY: Issues at the Intersection between Intellectual Property and Competition Policy Original SOFTWARE INTEROPERABILITY: Issues at the Intersection between Intellectual Property and Competition Policy / Morando, Federico. - (2009). Availability: This version is available at: 11583/2615059 since: 2015-07-16T15:01:26Z Publisher: Published DOI:10.6092/polito/porto/2615059 Terms of use: openAccess This article is made available under terms and conditions as specified in the corresponding bibliographic description in the repository Publisher copyright (Article begins on next page) 26 September 2021 Università degli Studi di Torino SOFTWARE INTEROPERABILITY Issues at the Intersection between Intellectual Property and Competition Policy Federico Morando Dottorato di Ricerca in Analisi Comparata dell’Economia, del Diritto e delle Istituzioni Codice del Settore Scientifico Disciplinare (SSD): IUS/02 Comparative Analysis of Institutions, Economics and Law (IEL) Università degli Studi di Torino SOFTWARE INTEROPERABILITY Issues at the Intersection between Intellectual Property and Competition Policy Federico Morando Dottorato di Ricerca in Analisi Comparata dell’Economia, del Diritto e delle Istituzioni (IEL) Comparative Analysis of Institutions, Economics and Law (IEL) Ciclo XXI Supervisors: Prof. Ben Depoorter Prof. Marco Ricolfi Candidate: Federico Morando Programme Coordinator: Prof. Giovanni B. Ramello Dipartimento di Economia “S. Cognetti de Martiis” Dipartimento di Scienze Economiche e Finanziarie “G. Prato” Dipartimento di Scienze Giuridiche Universiteit Gent SOFTWARE INTEROPERABILITY Issues at the Intersection between Intellectual Property and Competition Policy Federico Morando Doctoraat in de Rechten Thesis in Cotutelle a Valentina ACKNOWLEDGMENT Several people contributed, directly or indirectly, to the realization of this Ph.D. thesis. First of all, I am grateful to my supervisors, Prof.
    [Show full text]
  • Linux All-In-One for Dummies CHAPTER 3: Commanding the Shell
    Linux ® ALL-IN-ONE Linux ® ALL-IN-ONE 6th Edition by Emmett Dulaney Linux® All-in-One For Dummies®, 6th Edition Published by: John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030-5774, www.wiley.com Copyright © 2018 by John Wiley & Sons, Inc., Hoboken, New Jersey Published simultaneously in Canada No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without the prior written permission of the Publisher. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/ permissions. Trademarks: Wiley, For Dummies, the Dummies Man logo, Dummies.com, Making Everything Easier, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and may not be used without written permission. Linux is a registered trademark of Linus Torvalds. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book. LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: THE PUBLISHER AND THE AUTHOR MAKE NO REPRESENTATIONS OR WARRANTIES WITH RESPECT TO THE ACCURACY OR COMPLETENESS OF THE CONTENTS OF THIS WORK AND SPECIFICALLY DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE. NO WARRANTY MAY BE CREATED OR EXTENDED BY SALES OR PROMOTIONAL MATERIALS.
    [Show full text]
  • Shielded Cpus: Real-Time Performance in Standard Linux
    http://0-delivery.acm.org.innopac.lib.ryerson.ca/10.1145/990000/982981... Shielded CPUs: Real-Time Performance in Standard Linux Reserve one processor for a high-priority task and impruve real-time performance. by Steve Brosky In a multiprocessor system, a shielded CPU is a CPU dedicated to the activities associated with high-priority real-time tasks. Marking a CPU as shielded allows CPU resources to be reserved for high-priority tasks. The execution environment of a shielded CPU provides the predictability required for supporting real-time applications. In other words, a shielded CPU makes it possible to guarantee rapid response to external interrupts and to provide a more deterministic environment for executing real-time tasks. In the past, a shielded CPU could be created only on symmetric multiprocessing systems. With the advent of hyperthreading (where a single CPU chip has more than one logical CPU), even a uniprocessor can be configured to have a shielded CPU. The shielded CPU approach to providing high-end real-time performance allows the developer of a real-time application to achieve results comparable to the results achieved using a small real-time executive. For example, the results compare to approaches such as RTAI or RT/Linux, where Linux is run as one process under a real-time executive. The advantages of using a pure Linux environment for application development as opposed to one of these executives are many. For example, Linux has support for many device drivers, lowering the overall cost of implementing a complete application solution. A wide variety of high-level languages for better programming efficiency is supported.
    [Show full text]