Ubuntu - pa i nije tako lose :-)

Life-critical ili safety-critical softver. I voze ga po bolnicama, da. Poput FDA i civilna avijacija i vojska imaju svoje kriterijume.

"Our job is to provide accurate and timely information to the soldier in the field so they can perform their mission," said General Justice. "Open source software is part of the integrated network fabric which connects and enables our command and control system to work effectively, as people's lives depend on it.

"When we rolled into Baghdad, we did it using open source," General Justice continued. "It may come as a surprise to many of you, but the U.S. Army is "the" single largest install base for Red Hat Linux. I'm their largest customer."

bojan_bozovic: Ako si ironican, razmisli sta bi se desavalo da zaista koriste linux za ozbiljne stvari. Falconi bi padali kao kruske, Iran bi ukrao atomsku bombu, a mi bi svi mogli da se pomolimo jer bi treci svetski rat poceo sa prvim BSOD-om. I slicno za Windows. Zahtevi su strahoviti.

Kada od neceg zavise ljudski zivoti-koristi se linux

Clive Pigott wrote:
--------------------
As context, we are looking at a system where its primary purpose has no safety implications,
and where the preference is for an open-system/open-source platform - hence the interest in
Linux. Unfortunately, due to space constraints, the same machine needs to support a number of
safety-related applications (SIL1 or 2). So the concern is not only can we justify SIL1/2 on
Linux but how good is the separation mechanism if we have SIL1/2 code and 'SIL0' code supported
by the same operating system.
--------------------
First, when you are talking about "Linux", a question arises about the configuration.
The Linux kernel is compiled for each machine according to the drivers and other
low-level mechanisms that are required. And that's just the kernel. Then there
are the other necessary OS mechanisms.

Second, you apparently need an OS to support SIL 1/2 applications; Linux has no
specific mechanisms to do that, neither are any of the necessary properties
guaranteed.

Third, there is no partitioning mechanism that would allow you to run SIL 2 code and
untrusted code on the same machine and maintain the desired properties.

What you can do is build your own configuration from Linux source code which you
modify yourself. And then you'll have a Linux configuration which can support
certain guaranteed properties. You could likely sell it to others for a lot of money,
comparable with the enormous amount of work I guess it would take.

Or you can use one of the specific real-time operating systems designed for
running mission-critical code, have the vendor help you configure it and make
sure the vendor signs off on the required properties.

If it was my neck, I'd go for the last option.

PBL

--
Peter B. Ladkin PhD FBCS CW(hon)
Professor of Computer Networks and Distributed Systems,
Faculty of Technology, University of Bielefeld, 33594 Bielefeld, Germany
Tel (Vx/msg/Fax) +49 (0)521 880 7319 http://www.rvs.uni-bielefeld.de

bojan_bozovic:Ovo tvoje je za bisere Body Bag

Body Bag: Skoro sam procitao da se linux koristi od strane NASA-e(na kraju krajeva SE Linux je njihov projekat) za poveru kontrole leta Space Shuttle-ova i dosta toga drugog

Kada od neceg zavise ljudski zivoti-koristi se linux

bojan_bozovic:
Malo vracanje u realnost ti ne bi skodilo, Windows i OSX nisu nista bolji od Linuxa za te namene, tj. neupotrebljivi su, samo ja nisam zadrta zealotcina. Oces da kazes da ni ovaj iz Wind Rivera ne zna nista?

bojan_bozovic:
Ne jede se sve sto leti, ali ne vidi se da Body Bag to zna. Ovde samo troluje, a ja ne zelim da se iko prevari da njegovo FUDovanje ozbiljno shvati.

bojan_bozovic: To da koristi za kontrolu leta valjas dokazati, boy. I to u life-critical sistemu, dakle sa ljudskom posadom. To sto sam cuo od tebe je rekla-kazala, jer tacno za sta je koriscen, ako je koriscen, ne znamo. Sofizmi nece proci, ni slashdot, newsgroup post sa *.nasa.gov emailom ili *.gov, *.mil domen only, please.