<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[sploving的专栏]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/sploving</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; sploving]]></copyright><item><title><![CDATA[虚拟化前沿技术]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/6414555</link><guid>https://blog.youkuaiyun.com/sploving/article/details/6414555</guid><author>sploving</author><pubDate>Thu, 12 May 2011 14:00:00 +0800</pubDate><description><![CDATA[2010 

	HyperSafe: A Lightweight Approach to Provide Lifetime Hypervisor Control-Flow Integrity
	
	Z. Wang and X. Jiang
	 North Carolina State University 
	The 5th European Conference on Computer Systems
	 [Secure Systems]  

	NOVA: A Microhypervi]]></description><category></category></item><item><title><![CDATA[enable Selinux ]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/6227791</link><guid>https://blog.youkuaiyun.com/sploving/article/details/6227791</guid><author>sploving</author><pubDate>Sun, 06 Mar 2011 22:36:00 +0800</pubDate><description><![CDATA[<br />系统开启selinux步骤如下：<br />配置内核config文件，开启SELINUX 获得SElinux策略包以及工具
<br /> apt-get install selinux-basics selinux-policy-default1

. <br />运行selinux-activate 来配置Grub重启. <br />运行check-selinux-installation

 检查selinux是不是装成功。 如果出现FSCKFIX的错误，设置/etc/defaul]]></description><category></category></item><item><title><![CDATA[2.6.36内核优化]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/6223253</link><guid>https://blog.youkuaiyun.com/sploving/article/details/6223253</guid><author>sploving</author><pubDate>Fri, 04 Mar 2011 14:41:00 +0800</pubDate><description><![CDATA[<br /> <br />Linux 2.6.36内核优化指南<br />作者：Ken
Wu<br />Email: ken.wug@gmail.com<br />转载本文档请注明原文链接 http://kenwublog.com/docs/linux-kernel-2-6-36-optimization.htm！<br /> <br />介绍<br />本文档是一篇关于Linux Kernel 2.6.36
的最
简优化指南。作者旨在编译一份性能最佳且适合程序开发用的内核（带gnome
图形界面）]]></description><category></category></item><item><title><![CDATA[hooksafe]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/6206951</link><guid>https://blog.youkuaiyun.com/sploving/article/details/6206951</guid><author>sploving</author><pubDate>Fri, 25 Feb 2011 10:38:00 +0800</pubDate><description><![CDATA[<br />摘要 <br />Kernel rootkit通过修改控制数据或者内核中的钩子而劫持控制流，从而隐藏自己的存在。因此保护这些钩子函数成为一个关键问题（引出出问题了）。但是有许多从内核堆中动态分配的钩子，并且与其它内核数据混在一起，这造成了很多难度。另外，缺少灵活的商业硬件支持，造成了所谓的保护粒度沟（内核钩子的保护要求byte级别的粒度，但是商业硬件只支持页级别的保护）。<br />为解决这些问题，本文提出了HookSafe的概念，基于hypervisor的轻量级的系统，可以保护guestOS中]]></description><category></category></item><item><title><![CDATA[kdb 调试内核]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/6035457</link><guid>https://blog.youkuaiyun.com/sploving/article/details/6035457</guid><author>sploving</author><pubDate>Thu, 25 Nov 2010 17:20:00 +0800</pubDate><description><![CDATA[KDB 入门指南Hariprasad Nellitheertha
 (nharipra@in.ibm.com
), 软件工程师, IBMHariprasad
 Nellitheertha 在印度班加罗尔（Bangalore）的 IBM Linux 技术中心工作。他目前正在 Linux Change 
Team 从事修正内核和其它 Linux 错误的工作。Hari 研究过 OS/2 内核和文件系统。他的兴趣包括 Linux 
内核内部机理、文件系统和自主计算。可以通过
        nharip]]></description><category></category></item><item><title><![CDATA[Linux内核代码之初始化内核临时页表---经典至极(转)]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/6030300</link><guid>https://blog.youkuaiyun.com/sploving/article/details/6030300</guid><author>sploving</author><pubDate>Tue, 23 Nov 2010 17:34:00 +0800</pubDate><description><![CDATA[<br /> <br /><br />漫长而黑暗的史前时代终于到了setup。在setup汇编函数中，linux通过设置cr0寄存器的PE位（从实模式切换到保护模式）完成了史前文明到现代文明的转变。在setup时期，linux已经了解到世上可用的内存资源远远不止1MB。此时linux的欲望开始膨胀，最为满足它欲望的第一步，它开始抢占内存资源的前8MB。

初始化临时内核页表是在startup_32汇编语言函数中完成的。在ULK所述中，假设内核能容纳于RAM的前8MB空间，然后对RAM的前8MB进行恒等映]]></description><category></category></item><item><title><![CDATA[全虚拟化下的超级调用]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5990507</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5990507</guid><author>sploving</author><pubDate>Fri, 05 Nov 2010 18:31:00 +0800</pubDate><description><![CDATA[hvm实现超级调用]]></description><category></category></item><item><title><![CDATA[fedora 8安装kde]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5967514</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5967514</guid><author>sploving</author><pubDate>Tue, 26 Oct 2010 19:30:00 +0800</pubDate><description><![CDATA[  当我在装kscope时，总是出现kde错误，我的fedora 8是gnome的。安装kde方法：yum groupinstall kdeyum install kdelibs-develyum install kdegraphics-devel<br />
yum install kdebase-devel<br /><br />
yum install kdelibs4-devel<br /><br /><br />]]></description><category></category></item><item><title><![CDATA[xen 4.0.1 安装ubuntu hvm domu ]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5965173</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5965173</guid><author>sploving</author><pubDate>Mon, 25 Oct 2010 21:31:00 +0800</pubDate><description><![CDATA[<br />机器配置fedora 8 + xen 4.0.1, 下载ubuntu 9.04 iso文件<br />ubuntu-9.04-desktop-i386.iso 放到一个目录下，我把它<br />放到了/home/sploving/application目录下<br />1. 首先创建一个虚拟硬盘来安装hvm<br />mkdir hvm<br />dd if=/dev/zero of=/hvm/ubuntu.img bs=1k seek=10000k count=1<br />2. 创建配置文件]]></description><category></category></item><item><title><![CDATA[高端内存]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5914290</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5914290</guid><author>sploving</author><pubDate>Wed, 29 Sep 2010 14:50:00 +0800</pubDate><description><![CDATA[一. 什么是高端内存linux
中
内核使用3G-4G的线性地址空间，也就是说总共只有1G的地址空间可以用来映射物理地址空间。但是，如果内存大于1G的情况下呢？是不是超过1G的内存
就无法使用了呢？为此内核引入了一个高端内存的概念，把1G的线性地址空间划分为两部分：小于896M物理地址空间的称之为低端内存，这部分内存的物理地
址和3G开始的线性地址是一一对应映射的,也就是说内核使用的线性地址空间3G--(3G+896M)和物理地址空间0-896M一一对应；剩下的
128M的线性空间用来映射剩下的大]]></description><category></category></item><item><title><![CDATA[xen 源码编译，定制domU]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5866363</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5866363</guid><author>sploving</author><pubDate>Mon, 06 Sep 2010 15:12:00 +0800</pubDate><description><![CDATA[在编译安装xen时，通过修改配置文件，会自动在网上下载内核源码，然后编译生成domU. 但是如何通过编译源码来定制自己的domU呢？1. 下载支持xen的最新内核代码（pv_os
）2. cd 到该内核目录下3. make menuconfig4.make && make moudles_install && make install这样就编译出了自己的domU内核然后制作虚拟硬盘5. mkdir -p /disk/domU     cd /disk/domU     dd if=/dev/zero of]]></description><category></category></item><item><title><![CDATA[ubuntu10.04,编译xen 4.01]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5862273</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5862273</guid><author>sploving</author><pubDate>Fri, 03 Sep 2010 21:25:00 +0800</pubDate><description><![CDATA[<br />1.下载xen4.01的源码<br />2.安装必须的软件包（请参考http://wiki.xensource.com/xenwiki/Xen4.0）apt-get install bcc bin86 gawk bridge-utils iproute libcurl3 libcurl4-openssl-dev bzip2 <br />
module-init-tools transfig tgif texinfo texlive-latex-base texlive-latex-recomm]]></description><category></category></item><item><title><![CDATA[ubuntu 10.04安装IMA]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5857441</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5857441</guid><author>sploving</author><pubDate>Thu, 02 Sep 2010 10:14:00 +0800</pubDate><description><![CDATA[<br />首先编译内核：<br />make menuconfig<br />把CONFIG_IMA*选上<br />然后make -j4;make install, make modules, make modules_install<br />即可<br />在启动时，grub的kernel那一项要加上<br />ima_tcb=1<br />这样就可以查看/sys/kernel/security/ima/里面的东西了]]></description><category></category></item><item><title><![CDATA[ltp fix: FATAL: Test suite not installed correctly INFO: as root user type 'make ; make install']]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5855823</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5855823</guid><author>sploving</author><pubDate>Wed, 01 Sep 2010 15:53:00 +0800</pubDate><description><![CDATA[<br />当用到ltp进行测试时，下载源码<br />./configure<br />./make && make install<br />当进行测试时<br />./runltp -f ima总是出现下面错误：<br />
 FATAL: Test suite not installed correctly INFO: as root user type 'make ; make install'<br /> <br />原因是默认的安装在/opt/ltp<br />所以运行时，应该<br />c]]></description><category></category></item><item><title><![CDATA[Debian Squeese 配ip]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5843529</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5843529</guid><author>sploving</author><pubDate>Fri, 27 Aug 2010 14:29:00 +0800</pubDate><description><![CDATA[Debian Squeese配IP如下：修改/etc/init.d/rc.local（该文件为系统启动后默认的启动配置文件）ifconfig eth0 downifconfig eth0 xx.xx.xx.xx(ip) netmask xx.xx.xx.xx(子网掩码) hw ether xx:xx:xx:xx(MAC) uproute add defautle gw xx.xx.xx.xx(网关)修改/etc/resolv.conf,添加DNS
nameserver xx.xx.xx.xx重启即可]]></description><category></category></item><item><title><![CDATA[google groups 新的地址]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5828070</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5828070</guid><author>sploving</author><pubDate>Sat, 21 Aug 2010 08:40:00 +0800</pubDate><description><![CDATA[group的地址总是被屏蔽，发现一个新的可用的地址：groups.google.is]]></description><category></category></item><item><title><![CDATA[项目Epfs]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5822040</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5822040</guid><author>sploving</author><pubDate>Wed, 18 Aug 2010 19:12:00 +0800</pubDate><description><![CDATA[<br />项目Epfs
终于搞定，让人欣慰的是得到了mentor的肯定：<br /> <br />it was a pleasure to work with you, you made a really good<br />
job and you're very autonomous :), your future bosses will be lucky !<br />
So if you come in France, don't hesitate to send me an email..]]></description><category></category></item><item><title><![CDATA[kernel to/from NV]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5081705</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5081705</guid><author>sploving</author><pubDate>Sat, 26 Dec 2009 16:12:00 +0800</pubDate><description><![CDATA[#include #include #include "include/trousers/tss.h"#define CKERR if(result != TSS_SUCCESS) {perror("erro/n"); return 1;}int main(){  TSS_HCONTEXT hContext;  TSS_HTPM hTPM;  TSS_HPOLICY h]]></description><category></category></item><item><title><![CDATA[TPM 读写NV]]></title><link>https://blog.youkuaiyun.com/sploving/article/details/5044796</link><guid>https://blog.youkuaiyun.com/sploving/article/details/5044796</guid><author>sploving</author><pubDate>Sun, 20 Dec 2009 22:03:00 +0800</pubDate><description><![CDATA[前提：＃export LD_LIBRARY_PATH=/usr/local/lib:$LD_LIBRARY_PATH＃tcsd源码如下：#include #include "trousers/tss.h"#define CKERR if(result != TSS_SUCCESS) {perror("erro/n"); return 1;}int main(){  ]]></description><category></category></item><item><title><![CDATA[undefined reference to 'getfilecon']]></title><link>https://blog.youkuaiyun.com/sploving/article/details/4938186</link><guid>https://blog.youkuaiyun.com/sploving/article/details/4938186</guid><author>sploving</author><pubDate>Fri, 04 Dec 2009 09:53:00 +0800</pubDate><description><![CDATA[获取文件的extend attr: security.selinux属性：(test.c)#include int main(){  security_context_t sc;  const char* t = "/home/sploving/test";  int ret = getfilecon(t, &sc);  if (ret   else {    pr]]></description><category></category></item></channel></rss>