DOCSLIB.ORG

Opensolaris Et La Sécurité Master 2 SSI Université Du Sud, Toulon Et Du Var

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Opensolaris Et La Sécurité Master 2 SSI Université Du Sud, Toulon Et Du Var David Pauillac OpenSolaris et la sécurité Master 2 SSI Université du Sud, Toulon et du Var novembre 2007 ii Copyright c 2007 David PAUILLAC. Ce document est distribué sous Licence GNU Free Documentation License 1. Vous pouvez copier et/ou distribuer ce document à condition de respecter les termes de la GFDL, version 1.2 ou toute version publiée ultérieurement par la Free Software Foundation. Une copie de la licence est incluse en annexe C intitulée “GNU Free Documentation License”. Les nom et logos OpenSolaris sont des marques déposées par Sun Microsystem. 1. GFDL David Pauillac c novembre 2007 - OpenSolaris et la sécurité Avant-propos À propos du document Ce document, à l’origine, était destiné aux étudiants de master2 SSI de l’université de Sud, Toulon et du Var. Cependant, j’espère qu’il pourra ser- vir aussi aux administrateurs devant (ou désirant) utiliser un système basé sur OpenSolaris (tel que le système de Sun Microsystem, Solaris, largement répandu). Il m’a semblé intéressant de comparer, lorsque celà est nécessaire, OpenSo- laris et GNU/Linux ; en effet, ce dernier est bien plus connu dans le monde universitaire que le système ouvert de Sun Microsystem. Ainsi, le but de ce document n’est pas de remplacer la documentation fournie avec le système Solaris, mais juste de fournir des informations impor- tantes pour installer, configurer et sécuriser un système basé sur OpenSolaris, que ce soit sur un serveur ou sur une station de travail. Pour toute remarque ou question, vous pouvez contacter l’auteur à l’adresse suivante: [email protected] En introduction, il m’a semblé important de retracer brièvement l’histoire des systèmes UNIX ainsi que de traiter certains points théoriques de ce type de systèmes d’exploitation. La Sécurité des Systèmes d’Information - SSI Afin de ne pas perdre de vue les objectifs à atteindre, un petit rappel sur la SSI est nécessaire. La SSI a pour objet de garantir trois états de l’information (quelque soit la iiiiiiiii iv Avant-propos forme de celle-ci) : 1. la Confidentialité 2. L’Intégrité 3. la Disponibilité À mes yeux c’est cette dernière qui doit avoir toute notre attention. En effet, si l’information (ou le système d’information) n’est plus accessible à personne, quel est l’intérêt d’assurer sa confidentialité ou son intégrité? Imaginez l’impact d’un arrêt de service pour une entreprise d’e-commerce. Bien sûr, l’idéal est de trouver un équilibre entre la disponibilité - l’utilisation au quotidien - et la sécurité. Ainsi, les configurations que je propose dans ce document peuvent entrer en contradiction avec certaines politiques de sécurité - comme le fait de dé- bloquer un compte utilisateur de manière automatique après un certain laps de temps lorsque les x tentatives de connexion sont épuisées. Il faut aussi prendre en compte le nombre de machines à administrer. On peut se permettre l’établissement de règles nécessitant une intervention humaine sur un parc de cinq stations alors qu’elles seront difficilement appli- cables sur un parc de 5000 ! Convention typographique Afin de simplifier la lecture de ce document, une convention typogra- phique a été mise en place : Cette section met en évidence une propriété spécifique au système GNU/LINUX. Cette section décrit un risque potentiel pour le système ; ou une attaque possible. David Pauillac c novembre 2007 - OpenSolaris et la sécurité Avant-propos v Cette section apporte une solution à un risque ou une parade à une attaque. Présentation du document Ce document s’articule autour de trois “tomes” ; dans le premier, le plus théorique, le système OpenSolaris sera disséqué et comparé au système GNU/ Linux. Le second s’attardera sur l’aspect serveur, incluant les services ré- seaux, l’administration des utilisateurs. Enfin le dernier montrera qu’Open- Solaris peut très bien convenir aux stations de travail. Pour terminer, deux annexes ont été intégrées : la première montrera com- ment faire cohabiter OpenSolaris avec d’autres systèmes tels que GNU/Linux ou MS Windows 2. La deuxième traitera des cas particuliers des ordinateurs portables. Note à l’intention des élèves de master2 SSI Dans l’idéal, ce qui se fait très souvent dans le monde industriel, chaque serveur ne doit servir qu’à un seul service réseau - principe de l’unicité. Cependant, dans le cadre universitaire, il me semble peu probable d’avoir 7 machines par étudiant. OpenSolaris offrant le mécanisme de zone, nous n’uti- liserons qu’une machine pour tous les services réseau étudiés dans la partie II. Nous obtenons donc le découpage suivant : 2. Le multi-boot est très fortement déconseillé mais peut parfois être indispen- sable sur une station. Un serveur, quant à lui, n’en a jamais besoin et le multi-boot doit en être banni David Pauillac c novembre 2007 - OpenSolaris et la sécurité vi Avant-propos Fig. 1 – Découpage des stations de TP Remarque 1 Comme il sera vu dans ce document, il est envisageable de ne pas respecter le principe d’unicité pour une plate-forme de production 3. Bien sûr dans ce cas là, le risque d’indisponibilité des services en cas de problème matériel est extrêmement important - prévoir des serveurs redondants semble être une bonne solution - mais ceci dépasse le cadre de ce document. On donc peut imaginer un serveur unique hébergeant serveurs web et d’appli- cation (voire même bases de données) ou encore une plate-forme mail/ldap physiquement unique 4. 3. Première approche sensiblement différente par rapport aux conventions SSI 4. Á voir les associations de services possibles sans élever le risque d’indisponi- bilité de ces derniers David Pauillac c novembre 2007 - OpenSolaris et la sécurité Table des matières Avant-propos iii 1 Introduction 1 1.1 UNIX, une longue histoire de systèmes d’exploitation . .1 1.1.1 L’avènement de MULTICS - l’Ancètre . .1 1.1.2 De MULTICS à UNIX . .1 1.1.3 Les standards d’UNIX . .2 1.2 La philosophie d’UNIX . .3 1.3 Le système OpenSolaris . .6 OpenSolaris - Dissection d’un système 9 I Le système OpenSolaris 11 1 Le noyau et le système 13 1.1 Un noyau . 13 1.1.1 L’environnement d’exécution multi-processus . 15 1.2 La mémoire virtuelle . 17 1.2.1 L’adresse virtuelle . 17 1.2.2 L’espace d’adressage . 17 1.3 Périphériques . 17 1.3.1 Les fichiers spéciaux . 17 1.4 Comparaison avec GNU/Linux . 18 2 Le système de fichiers 21 2.1 La gestion des disques durs et des partitions . 21 2.2 Fichiers et répertoires importants d’OpenSolaris . 22 viiviivii viii TABLE DES MATIÈRES 3 Le processus de démarrage 27 3.1 La phase d’initialisation . 28 3.2 Le fichier /etc/inittab . 28 3.3 Les scripts RC et les niveaux d’exécution . 29 4 Les mécanismes de sécurité d’OpenSolaris 31 4.1 Les zones . 32 4.1.1 Généralités . 32 4.1.2 La sécurité des zones . 32 4.1.3 Commandes utiles . 33 4.1.4 Création des zones . 34 4.1.5 Initialisation des zones . 35 4.1.6 Clonage de zone . 35 4.2 Les Privilèges . 35 4.2.1 Les contrôles de droits . 35 4.2.2 Les privilèges de Solaris . 36 4.2.3 La gestion des privilèges . 37 4.2.3.1 Les commandes importantes . 37 4.2.3.2 Les privilèges et leur définition . 37 4.3 SCF - Solaris Cryptographic Framework . 41 4.4 SMF - Service Management Facilities . 42 4.5 RBAC - Role Based Access Control . 42 4.5.1 Fichiers de configuration . 43 4.6 Trusted Extensions . 43 4.6.1 MAC et Labels . 44 4.6.2 Trusted Networking - CIPSO . 44 4.6.3 Trusted GUI . 44 5 Performances et diagnostique 45 5.1 Contrôler les processus . 45 5.2 Monitorer les processus . 46 5.3 Tracer le système - dtrace . 48 5.4 Tracer l’activité du noyau . 49 II Installer OpenSolaris 51 1 L’installation d’OpenSolaris 53 1.1 Le programme d’installation . 53 1.2 Mise en place du réseau . 63 1.2.1 Configurer les interfaces réseau . 63 David Pauillac c novembre 2007 - OpenSolaris et la sécurité TABLE DES MATIÈRES ix 1.2.2 Routes et routeur . 63 1.3 État du système après l’installation . 67 1.4 Suppression des packages inutiles . 68 OpenSolaris d’un point de vue serveur 69 I Configurer et sécuriser OpenSolaris 71 1 La gestion des utilisateurs 73 1.1 La gestion des mots de passe . 73 1.1.1 Les utilisateurs . 73 1.1.2 Les groupes . 78 1.1.3 Les rôles . 78 1.2 Le système d’authentification . 79 1.2.1 Le module PAM . 79 1.2.1.1 Mode de fonctionnement . 79 1.2.1.2 Hiérarchisation des taches d’authentification . 80 1.2.1.3 Conclusion . 82 2 Le contrôle des accès 83 2.1 Suppression des exécutables SUID/SGID . 83 2.2 Politique générale sur les fichiers . 83 2.3 Suppression des commandes distantes . 84 3 Le système 85 3.1 Personnaliser la pile IP . 85 3.2 Configurer le pare-feu . 86 3.3 Modifier le niveau général de sécurité . 87 3.3.1 Renforcer les mots de passe . 87 3.3.2 Blocage et suppression des comptes inutiles . 91 3.4 Protections diverses . 92 3.5 Test de scan . 92 II Les services réseau 97 1 Serveur de nom 99 1.1 Généralités . 99 1.1.1 Protocole utilisé . 101 1.1.2 Application . 101 David Pauillac c novembre 2007 - OpenSolaris et la sécurité x TABLE DES MATIÈRES 1.2 Installation . 102 1.2.1 Création de la zone dédiée .
Load more

Recommended publications
  • Oracle Solaris: the Carrier-Grade Operating System Technical Brief
    An Oracle White Paper February 2011 Oracle Solaris: The Carrier-Grade Operating System Oracle White Paper—Oracle Solaris: The Carrier-Grade OS Executive Summary.............................................................................1 ® Powering Communication—The Oracle Solaris Ecosystem..............3 Integrated and Optimized Stack ......................................................5 End-to-End Security ........................................................................5 Unparalleled Performance and Scalability.......................................6 Increased Reliability ........................................................................7 Unmatched Flexibility ......................................................................7 SCOPE Alliance ..............................................................................7 Security................................................................................................8 Security Hardening and Monitoring .................................................8 Process and User Rights Management...........................................9 Network Security and Encrypted Communications .......................10 Virtualization ......................................................................................13 Oracle VM Server for SPARC .......................................................13 Oracle Solaris Zones .....................................................................14 Virtualized Networking...................................................................15
    [Show full text]
  • Sun Ultratm 5 Workstation Just the Facts
    Sun UltraTM 5 Workstation Just the Facts Copyrights 1999 Sun Microsystems, Inc. All Rights Reserved. Sun, Sun Microsystems, the Sun logo, Ultra, PGX, PGX24, Solaris, Sun Enterprise, SunClient, UltraComputing, Catalyst, SunPCi, OpenWindows, PGX32, VIS, Java, JDK, XGL, XIL, Java 3D, SunVTS, ShowMe, ShowMe TV, SunForum, Java WorkShop, Java Studio, AnswerBook, AnswerBook2, Sun Enterprise SyMON, Solstice, Solstice AutoClient, ShowMe How, SunCD, SunCD 2Plus, Sun StorEdge, SunButtons, SunDials, SunMicrophone, SunFDDI, SunLink, SunHSI, SunATM, SLC, ELC, IPC, IPX, SunSpectrum, JavaStation, SunSpectrum Platinum, SunSpectrum Gold, SunSpectrum Silver, SunSpectrum Bronze, SunVIP, SunSolve, and SunSolve EarlyNotifier are trademarks, registered trademarks, or service marks of Sun Microsystems, Inc. in the United States and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the United States and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. UNIX is a registered trademark in the United States and other countries, exclusively licensed through X/Open Company, Ltd. OpenGL is a registered trademark of Silicon Graphics, Inc. Display PostScript and PostScript are trademarks of Adobe Systems, Incorporated, which may be registered in certain jurisdictions. Netscape is a trademark of Netscape Communications Corporation. DLT is claimed as a trademark of Quantum Corporation in the United States and other countries. Just the Facts May 1999 Positioning The Sun UltraTM 5 Workstation Figure 1. The Ultra 5 workstation The Sun UltraTM 5 workstation is an entry-level workstation based upon the 333- and 360-MHz UltraSPARCTM-IIi processors. The Ultra 5 is Sun’s lowest-priced workstation, designed to meet the needs of price-sensitive and volume-purchase customers in the personal workstation market without sacrificing performance.
    [Show full text]
  • Man Pages Section 3 Library Interfaces and Headers
    man pages section 3: Library Interfaces and Headers Beta Part No: 819–2242–33 February 2010 Copyright ©2010 Sun Microsystems, Inc. All Rights Reserved 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved. Sun Microsystems, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more U.S. patents or pending patent applications in the U.S. and in other countries. U.S. Government Rights – Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. This distribution may include materials developed by third parties. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, the Solaris logo, the Java Coffee Cup logo, docs.sun.com, Java, and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. The OPEN LOOK and SunTM Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry.
    [Show full text]
  • Sun Microsystems Solaris 10 What's
    Solaris 10 What’s New Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A. Part No: 817–0547–15 January 2005 Copyright 2005 Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved. This product or document is protected by copyright and distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this product or document may be reproduced in any form by any means without prior written authorization of Sun and its licensors, if any. Third-party software, including font technology, is copyrighted and licensed from Sun suppliers. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, docs.sun.com, AnswerBook, AnswerBook2, SunVTS, Java, J2SE, J2EE, JavaServer, JumpStart, Sun Fire, StarOffice, Sun Blade, Sun Ray, Solstice Enterprise Agents, CacheFS, Sun StorEdge, and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. FireWire is a trademark of Apple Computer, Inc., used under license. Netscape and Netscape Navigator are trademarks or registered trademarks of Netscape Communications Corporation. Mozilla is a trademark or registered trademark of Netscape Communications Corporation in the United States and other countries.
    [Show full text]
  • Solaris 10 End of Life
    Solaris 10 end of life Continue Oracle Solaris 10 has had an amazing OS update, including ground features such as zones (Solaris containers), FSS, Services, Dynamic Tracking (against live production operating systems without impact), and logical domains. These features have been imitated in the market (imitation is the best form of flattery!) like all good things, they have to come to an end. Sun Microsystems was acquired by Oracle and eventually, the largest OS known to the industry, needs to be updated. Oracle has set a retirement date of January 2021. Oracle indicated that Solaris 10 systems would need to raise support costs. Oracle has never provided migratory tools to facilitate migration from Solaris 10 to Solaris 11, so migration to Solaris has been slow. In September 2019, Oracle decided that extended support for Solaris 10 without an additional financial penalty would be delayed until 2024! Well its March 1 is just a reminder that Oracle Solaris 10 is getting the end of life regarding support if you accept extended support from Oracle. Combined with the fact gdpR should take effect on May 25, 2018 you want to make sure that you are either upgraded to Solaris 11.3 or have taken extended support to obtain any patches for security issues. For more information on tanningix releases and support dates of old and new follow this link ×Sestive to abort the Unix Error Operating System originally developed by Sun Microsystems SolarisDeveloperSun Microsystems (acquired by Oracle Corporation in 2009)Written inC, C'OSUnixWorking StateCurrentSource ModelMixedInitial release1992; 28 years ago (1992-06)Last release11.4 / August 28, 2018; 2 years ago (2018-08-28)Marketing targetServer, PlatformsCurrent: SPARC, x86-64 Former: IA-32, PowerPCKernel typeMonolithic with dynamically downloadable modulesDefault user interface GNOME-2-LicenseVariousOfficial websitewww.oracle.com/solaris Solaris is the own operating system Of Unix, originally developed by Sunsystems.
    [Show full text]
  • Bae Systems Information and Electronic Systems Integration Inc
    BAE SYSTEMS INFORMATION AND ELECTRONIC SYSTEMS INTEGRATION INC. GEOSPATIAL EXPLOITATION PRODUCTS® PLATFORM SOFTWARE LICENSE AGREEMENT THIS SOFTWARE LICENSE AGREEMENT (“AGREEMENT”) APPLIES TO ANY SOFTWARE PRODUCT(S) THAT MAY BE PROVIDED BY BAE SYSTEMS INFORMATION AND ELECTRONIC SYSTEMS INTEGRATION INC. (“LICENSOR”) TO YOU (“LICENSEE”), INCLUDING BUT NOT LIMITED TO GXP XPLORER®, SOCET GXP®, SOCET SET®, GXP WEBVIEW®, GXP INMOTION™, GXP INMOTION™ SERVER, GXP JPIP SERVER, GXP OPSVIEW™ AND IF APPLICABLE (AS SPECIFICALLY IDENTIFIED IN THE APPLICABLE ORDERING DOCUMENT OR CONTRACT) THE GXP XPLORER SERVER TO DIB CONNECTOR (EACH SEPARATELY REFERRED TO BELOW AS “GXP SOFTWARE”). READ THE TERMS AND CONDITIONS OF THIS AGREEMENT CAREFULLY BEFORE (1) OPENING THE PACKAGE OR DOWNLOADING THE FILE CONTAINING THE GXP SOFTWARE, OR (2) CLICKING THE “I ACCEPT” BUTTON. THE GXP SOFTWARE AND THE ACCOMPANYING USER DOCUMENTATION (EACH REFERRED TO AS THE “PROGRAM”) ARE COPYRIGHTED AND LICENSED - NOT SOLD. BY OPENING THE SOFTWARE PACKAGE, OR CLICKING “I ACCEPT”, YOU ARE ACCEPTING AND AGREEING TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT ACCEPT THE TERMS AND CONDITIONS OF THIS AGREEMENT PROMPTLY RETURN THE UNOPENED PACKAGE TO THE PARTY FROM WHOM IT WAS ACQUIRED, CANCEL THE DOWNLOAD OR CANCEL THE INSTALLATION. IF YOU ARE A UNITED STATES (“U.S”) GOVERNMENT CUSTOMER, ACCEPTANCE OF THESE TERMS ARE EFFECTUATED BY ACCEPTANCE OF A PROPOSAL, QUOTE, OR OTHER ORDERING DOCUMENT OR CONTRACT INCORPORATING THIS AGREEMENT BY REFERENCE OR OTHERWISE OR BY CONTRACTING OFFICER EXECUTION OF THIS AGREEMENT. THIS AGREEMENT REPRESENTS THE ENTIRE AGREEMENT CONCERNING THE LICENSING OF THE PROGRAM BETWEEN LICENSEE AND LICENSOR, AND IT SUPERSEDES AND REPLACES IN ITS ENTIRETY ANY PRIOR PROPOSAL, REPRESENTATION, OR UNDERSTANDING BETWEEN THE PARTIES.
    [Show full text]
  • Sun SPARC Enterprise T5440 Servers
    Sun SPARC Enterprise® T5440 Server Just the Facts SunWIN token 526118 December 16, 2009 Version 2.3 Distribution restricted to Sun Internal and Authorized Partners Only. Not for distribution otherwise, in whole or in part T5440 Server Just the Facts Dec. 16, 2009 Sun Internal and Authorized Partner Use Only Page 1 of 133 Copyrights ©2008, 2009 Sun Microsystems, Inc. All Rights Reserved. Sun, Sun Microsystems, the Sun logo, Sun Fire, Sun SPARC Enterprise, Solaris, Java, J2EE, Sun Java, SunSpectrum, iForce, VIS, SunVTS, Sun N1, CoolThreads, Sun StorEdge, Sun Enterprise, Netra, SunSpectrum Platinum, SunSpectrum Gold, SunSpectrum Silver, and SunSpectrum Bronze are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the United States and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. UNIX is a registered trademark in the United States and other countries, exclusively licensed through X/Open Company, Ltd. T5440 Server Just the Facts Dec. 16, 2009 Sun Internal and Authorized Partner Use Only Page 2 of 133 Revision History Version Date Comments 1.0 Oct. 13, 2008 - Initial version 1.1 Oct. 16, 2008 - Enhanced I/O Expansion Module section - Notes on release tabs of XSR-1242/XSR-1242E rack - Updated IBM 560 and HP DL580 G5 competitive information - Updates to external storage products 1.2 Nov. 18, 2008 - Number
    [Show full text]
  • Deliveringperformanceonsun:Optimizing Applicationsforsolaris
    DeliveringPerformanceonSun:Optimizing ApplicationsforSolaris TechnicalWhitePaper 1997-1999 Sun Microsystems, Inc. 901 San Antonio Road, Palo Alto, California 94303 U.S.A All rights reserved. This product and related documentation is protected by copyright and distributed under licenses restricting its use, copying, distribution and decompilation. No part of this product or related documentation may be reproduced in any form by any means without prior written authorization of Sun and its licensors, if any. Portions of this product may be derived from the UNIX® and Berkeley 4.3 BSD systems, licensed from UNIX Systems Laboratories, Inc. and the University of California, respectively. Third party font software in this product is protected by copyright and licensed from Sun’s Font Suppliers. RESTRICTED RIGHTS LEGEND: Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR 52.227-19. The product described in this manual may be protected by one or more U.S. patents, foreign patents, or pending applications. TRADEMARKS Sun, Sun Microsystems, the Sun logo, Sun WorkShop, and Sun Enterprise are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. UltraSPARC, SPARCompiler, SPARCstation, SPARCserver, microSPARC, and SuperSPARC are trademarks or registered trademarks of SPARC International, Inc. in the United States and other countries. All other product names mentioned herein are the trademarks of their respective owners. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc.
    [Show full text]
  • Performance of Image and Video Processing with General-Purpose
    Performance of Image and Video Processing with General-Purpose Processors and Media ISA Extensions y Parthasarathy Ranganathan , Sarita Adve , and Norman P. Jouppi Electrical and Computer Engineering y Western Research Laboratory Rice University Compaq Computer Corporation g fparthas,sarita @rice.edu [email protected] Abstract Media processing refers to the computing required for the creation, encoding/decoding, processing, display, and com- This paper aims to provide a quantitative understanding munication of digital multimedia information such as im- of the performance of image and video processing applica- ages, audio, video, and graphics. The last few years tions on general-purpose processors, without and with me- have seen significant advances in this area, but the true dia ISA extensions. We use detailed simulation of 12 bench- promise of media processing will be seen only when ap- marks to study the effectiveness of current architectural fea- plications such as collaborative teleconferencing, distance tures and identify future challenges for these workloads. learning, and high-quality media-rich content channels ap- Our results show that conventional techniques in current pear in ubiquitously available commodity systems. Fur- processors to enhance instruction-level parallelism (ILP) ther out, advanced human-computer interfaces, telepres- provide a factor of 2.3X to 4.2X performance improve- ence, and immersive and interactive virtual environments ment. The Sun VIS media ISA extensions provide an ad- hold even greater promise. ditional 1.1X to 4.2X performance improvement. The ILP One obstacle in achieving this promise is the high com- features and media ISA extensions significantly reduce the putational demands imposed by these applications.
    [Show full text]
  • Sun Studio for What Linux?
    OpenSolaris: an ultimate development platform? Roman Shaposhnik Sun Studio Linux Architect, SDT Sun Microsystems # 1 1 Sun Studio Compilers and Tools Agenda (last chance of leaving): 14:30 – 16:00 (Roman Shaposhnik, Sun microsystems inc.) Introduction Exposé of OpenSolaris as a development platform Sun Studio as the toolchain of choice for OpenSolaris Toy Show 16:00 – 16:45 (Adriaan De Groot, Project KDE) Developing in C++ with OpenSolaris and Sun Studio 12 16:45 – 17:30 (Dennis Chernoivanov, Tocarema AB) Using Solaris to reach the next dimension of automated trading # 2 Sun Studio Compilers and Tools Developers, developers, developers Microsoft got the wind of the problem in 2000-2001 Solaris, meanwhile, kept bragging about deployment Developers are a canary in the coal mine What happened to AIX, HP-UX, Irix? Are they dead? What happened to Apple? I have a problem with this conference's agenda: Developing the plumbing for the platform Developing the platform itself Developing the eco-system for the platform Application development # 3 Sun Studio Compilers and Tools What kind of a developer are you? Segmented by market Database, Enterprise, HPC, Web 2.0, Multimedia, Telco Segmented by technology Languages, Tools, Software APIs, Hardware APIs What do they all have in common in 2008? Postmodern software development practices Total disregard for vendor lock-in The line between software and hardware gets blurry Open Standards/Protocols/Source Community Software Development # 4 Sun Studio Compilers and Tools What do developers want? This is
    [Show full text]
  • 2 the VIS Instruction Set Pdist Instruction
    The VISTM Instruction Set Version 1.0 June 2002 A White Paper This document provides an overview of the Visual Instruction Set. ® 4150 Network Circle Santa Clara, CA 95054 USA www.sun.com Copyright © 2002 Sun Microsystems, Inc. All Rights reserved. THE INFORMATION CONTAINED IN THIS DOCUMENT IS PROVIDED"AS IS" WITHOUT ANY EXPRESS REPRESENTATIONS OR WARRANTIES. IN ADDITION, SUN MICROSYSTEMS, INC. DISCLAIMS ALL IMPLIED REPRESENTATIONS AND WARRANTIES, INCLUDING ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT OF THIRD PARTY INTELLECTUAL PROPERTY RIGHTS. This document contains proprietary information of Sun Microsystems, Inc. or under license from third parties. No part of this document may be reproduced in any form or by any means or transferred to any third party without the prior written consent of Sun Microsystems, Inc. Sun, Sun Microsystems, the Sun Logo, VIS, Java, and mediaLib are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the United States and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. UNIX is a registered trademark in the United States and other countries, exclusively licensed through x/Open Company Ltd. The information contained in this document is not designed or intended for use in on-line control of aircraft, air traffic, aircraft navigation or aircraft communications; or in the design, construction, operation or maintenance of any nuclear facility. Sun disclaims any express or implied warranty of fitness for such uses.
    [Show full text]
  • Red Hat Enterprise Linux: Your Solaris Alternative
    RED HAT ENTERPRISE LINUX: YOUR SOLARIS ALTERNATIVE 2 INTRODUCTION 3 FACTORS THAT INFLUENCE OPERATING SYSTEM CHOICE New projects Mandated migration 4 BUSINESS REQUIREMENTS TO CONSIDER Strength of ISV support Application migration considerations Performance Availability and scalability Security 11 TOTAL COST OF OWNERSHIP (TCO) Feature of comparison 13 DETAILED COMPARISON OF SELECTED FEATURES Filesystems and volume managers: Ext3, Ext4, XFS vs. UFS and ZFS DTrace vs SystemTap Software management 18 CONCLUSION Platform support Customer value www.redhat.com Red Hat Enterprise Linux: Your Solaris Alternative INTRODUCTION There were two primary reasons that IT professionals previously chose the Oracle Sun SPARC platform to power their IT infrastructures: the performance of the hardware and the robustness of the Solaris operating system. As the price, performance, and reliability of industry-standard x86_64 servers have increased to the point where they can meet and exceed these features, the reasons to continue buying SPARC hardware have become less and less compelling. This is particularly true with with large, multi-core x86 systems that are designed specifically for Linux©, such as the latest 128-core systems. Similarly, Linux, and in particular, Red Hat© Enterprise Linux, have emerged as the operating system of choice to leverage the benefits of open, industry-standard architectures. Selecting an operating system for your IT infrastructure has long-term consequences. The selection process must take into account not only the technical features of the current operating system, but the ability for the operating system to enable and support your future business requirements. While Oracle has quelled some worry over their commitment to Solaris, the move to Solaris 11 will likely be as painful as the move from Solaris 8/9 to Solaris 10, as Solaris 11 is significantly different from Solaris 10.
    [Show full text]