• Title/Summary/Keyword: Linux kernel

Search Result 301, Processing Time 0.033 seconds

Performance Improvements through Policy Reorganization in SELinux (SELinux의 정책 재구성을 통한 성능 개선)

  • Ko, Jae-Yong;Choi, Jeong-In;Cho, Kyung-Yeon;Lee, Cheol-Hoon
    • The Journal of the Korea Contents Association
    • /
    • v.17 no.4
    • /
    • pp.307-319
    • /
    • 2017
  • SELinux is known as a secure operating system that is easily accessible to users due to the popularization of Linux, and is applied to various security operating system references deployed on systems such as embedded systems and servers. However, if SELinux is applied without considering the performance overhead of activating the SELinux kernel module, the performance of the entire system may be degraded. In this paper, we describe the factors directly affecting the performance inside the SELinux kernel and show that it is possible to improve performance by simply reorganizing the policy without changing the SELinux kernel. This can be used as a reference when security administrators or developers apply SELinux.

Design of the Kernel Hardening Function in the Linux Network Module (리눅스 네트워크 모듈에서 커널 하드닝 기능 설계)

  • 장승주
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.8 no.5
    • /
    • pp.961-969
    • /
    • 2004
  • A panic state is often caused by careless computer control. It could be also caused by a kernel programmer's mistake. It can make a big problem in computer system when it happens a lot. When a panic occurs, the process of the panic state has to be checked, then if it can be restored, operating system restores it, but if not, operating system runs the panic function to stop the system in the kernel hardening O.S. To decide recovery of the process, the type of the panic for the present process should be checked. 1'he value type and the address type have to restore the process. If the system process is in a panic state, the system should be designed to shutdown hardening function In the Linux operating system. So it has to decide whether the process should be restored or not before going to the panic state.

A Fast Booting Scheme of Linux for Embedded System (임베디드 시스템을 위한 리눅스의 빠른 부팅 기법)

  • Park, Seong-Ho;Shine, Kwang-Mu;Kim, Young-Ju
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.10 no.12
    • /
    • pp.2173-2180
    • /
    • 2006
  • Linux has peculiarities of safety, flexibility, and open source. and Linux supports various hardware platforms. But because general Linux was designed for high performance H/W, Linux has several points to support for embedded system with limited resource. Specially, a main point is booting time that is spent to tens of second. In this paper, we purpose a fast booting scheme of Linux for Embedded System and estimate a performance of scheme purposed through realized prototype. Specially, to reduce booting time in environment of embedded system, we optimize boot loader, kernel and root file system. As a result, boot time reduce 28 second to 11 second in HBE-EMPOS II.

Design and Implementation of a Remote Debugger for Concurrent Debugging of Multiple Processes based on Embeded Linux System (임베디드 Linux 시스템 기반 프로세스 동시 디버깅을 지원하는 원격 디버거 설계 및 구현)

  • Sim, Hyun-Chul;Kang, Yong-Hyeog;Eom, Young-Ik
    • The KIPS Transactions:PartA
    • /
    • v.10A no.4
    • /
    • pp.305-312
    • /
    • 2003
  • In the embedded Linux environments, developers can concurrently debug multiple processes that have parent-child relationships using multiple gdbs and gdbservers. But, it needs additional coding efforts and messy works of activating another gdbs and gdbservers for each created process, and so, it may be inefficient in the viewpoint of developers. In this paper, we propose a mgdb library and mgdbserver that supports concurrent debugging of multiple processes in the embedded Linux systems by using the library wrapping mechanism without modifying the kernel. Also, through the experimentation of concurrent debugging for multiple processes that communicate by an unnamed pipe, we show that our proposed debugging mechanism is more efficient than the preexisting mechanisms.

Design and Implementation of Dual Kernel for Considering Bard Real-Time Constraints.

  • Yang, Seung-mo;Lin, Chi-ho;Kim, Hi-seok
    • Proceedings of the IEEK Conference
    • /
    • 2000.07a
    • /
    • pp.489-492
    • /
    • 2000
  • Because of the great variety of demands on real-time scheduling, real-time kernel should be small, fast and predictable. In this paper, we present that Real-time applications should be split into small and simple parts with hard real-time constraints. Following this concept, we have designed and implemented to have the properties of both hard real-time kernel and general kernel. And, to prove be useful the proposal kernel, we compare and analyze the performance with RT-Linux 0.5a

  • PDF

Implementation of 4-channel Embedded DVR Based on Linux (리눅스 기반 4채널 임베디드 DVR 구현)

  • 이흥규;정갑천;최종현;박성모
    • Proceedings of the IEEK Conference
    • /
    • 2003.07c
    • /
    • pp.2677-2680
    • /
    • 2003
  • This paper describes the implementation of a 4 channel embedded DVR system. It receives analog video from CCD cameras and converts to 640${\times}$480 CCIR-656 digital video by 30 frames/sec. These digital images are compressed to the wevelet transformed image using hardware codec which is capable of 350:1 real-time compression and decompression. The DVR is working on linux and it implemented on an embedded system which is based on StrongARM processor. For the interface between processor system module and image processing module, GPIO and memory control module are used, device drivers are developed. Linux kernel source is customized. This paper provides techniques of embedded system development and embedded linux porting.

  • PDF

A Study to support real-time on Multiprocessor Linux (멀티프로세서 기반 리눅스에 실시간성 지원 방안 연구)

  • Lee, Sang-Gil;Lee, Cheol-Hoon
    • Proceedings of the Korea Contents Association Conference
    • /
    • 2015.05a
    • /
    • pp.57-58
    • /
    • 2015
  • 실시간성이란 연산의 정확성과 연산 수행시간이 예측 가능한 시간 내에 완료되는 것을 말한다. 범용 운영체제인 리눅스에서는 CFS(Complete Fair Scheduling)을 사용하여 높은 우선순위 태스크에 대한 빠른 응답성을 보장할 수 없기 때문에 실시간성을 제공하지 못한다. 이를 해결하기 위해 RTiK-Linux(Real-Time implanted Kernel for Linux)가 개발되어 리눅스 환경에서 실시간성을 제공하였지만 개발 당시 싱글프로세서 환경만을 고려하여 최근 사용되는 멀티프로세서 환경에서는 실시간성 제공에 어려움이 있다. 본 논문에서는 멀티프로세서 리눅스 상에서 발생하는 RTiK-Linux의 문제점에 대해 설명하고 이에 대한 해결방안을 기술하여 멀티프로세서 리눅스 상에서 실시간성을 제공하기 위한 방안을 연구하였다.

  • PDF

Development of Flight Control Application for Unmanned Aerial Vehicle Employing Linux OS (리눅스 기반 무인항공기 제어 애플리케이션 개발)

  • Kim Myoung-Hyun;Moon Seungbin;Hong Sung Kyung
    • Journal of Institute of Control, Robotics and Systems
    • /
    • v.12 no.1
    • /
    • pp.78-84
    • /
    • 2006
  • This paper describes UAV (Unmanned Aerial Vehicle) control system which employs PC104 modules. It is controlled by application program based on Linux OS. This application consists of both Linux device driver in kernel-space and user application in user-space. In order to get data required in the unmanned flight, external devices are connected to PC104 modules. We explain how Linux device drivers deal with data transmitted by external devices and we account for how the user application controls UAV on the basis of data processed in the device driver as well. Furthermore we look into the role of GCS (Ground Control Station) which is to monitor the state of UAV.

Implementation of Web-Based Remote Control System Using Embedded Linux (내장형 리눅스를 이용한 웹 기반 원격 제어 시스템 구현)

  • Lee, Seok-Won;Lee, Jin-Woo
    • Proceedings of the KIEE Conference
    • /
    • 2003.07d
    • /
    • pp.2609-2611
    • /
    • 2003
  • In this study, we explain the process and the technique required for implementing web-based remote control system based on embedded processor, SAl110, and embedded Linux. At first. cross-compile environment for target system should be constructed on host computer, and bootloader in charge of Linux booting may be loaded on the target system. Then, kernel image is compiled and loaded on the target system. Embedded Linux porting process is completed when ram disk image is generated. Finally, we load wed-server and device driver on the ram disk and make web-page for remote control using CGI. Through the above process, we implement web-based remote control system and present the result.

  • PDF

A Kernel Module to Support High-Performance Intra-Node Communication for Multi-Core Systems (멀티 코어 시스템을 위한 고속 노드내 통신 지원 모듈)

  • Jin, Hyun-Wook;Kang, Hyun-Goo;Kim, Jong-Soon
    • Journal of KIISE:Computer Systems and Theory
    • /
    • v.34 no.9
    • /
    • pp.407-415
    • /
    • 2007
  • In parallel cluster computing systems, the efficiency of communication between computing nodes is one of important factors that decide overall system performance. Accordingly, many researchers have studied on high-performance inter-node communication. The recently launched multi-core processor, however. increases the importance of intra-node communication as well because the more the number of cores in a node, the more the number of parallel processes running in the same node. Though there have been studies on intra-node communications, these have limited considerations on the state-of-the-art systems. In this paper, we propose a Linux kernel module that minimizes the number of data copy by exploiting the memory mapping mechanism for high-performance intra-node communication. The proposed kernel module supports the Linux kernel version 2.6. The performance measurements over a multi-core system present that the proposed kernel module can achieve lower latency up to 62% and higher throughput up to 144% than an existing kernel module approach. In addition, the measurements reveal that the performance of intra-node communication can vary significantly based on whether the cores that run the communication processes are belong to the same processor package (i.e., sharing the L2 cache).