Chapter 3

Process Description
and Control
Operating Systems: Internals
and Design Principles
The concept of process is fundamental to the structure of
modern computer operating systems. Its evolution in
analyzing problems of synchronization, deadlock, and
scheduling in operating systems has been a major
intellectual contribution of computer science.

WHAT CAN BE AUTOMATED?:

THE COMPUTER SCIENCE AND
ENGINEERING RESEARCH STUDY,
MIT Press, 1980
Summary of Earlier Concepts
• A computer platform • The OS was developed
consists of a to provide a convenient,
collection of feature-rich, secure,
hardware resources
and consistent interface
• Computer for applications to use
applications are • We can think of the OS
developed to perform as providing a uniform,
some task
abstract representation
• It is inefficient for of resources that can be
applications to be requested and
written directly for a accessed by
given hardware applications
platform
OS Management of Application
Execution
•Resources are made available to
multiple applications
•The processor is switched among
multiple applications so all will
appear to be progressing
•The processor and I/O devices can
be used efficiently
 Process Elements
•Two essential elements of a process are:

Program code
 Which may be shared with other processes that are
executing the same program

A set of data associated with that code

•When the processor begins to execute
the program code, we refer to this
executing entity as a process
 Process Elements
• While the program is executing, this process can be
uniquely characterized by a number of elements,
including:

identifier

program
state priority
counter

memory context I/O status accounting

pointers data information information
Process
Control Block
Contains the process
elements
Makes it possible to
interrupt a running process
and later resume execution
as if the interruption had
not occurred
Created and managed by
the operating system
Key tool that allows
support for multiple
processes
(multiprogramming)
Process States

Trace Dispatcher

the behavior of an individual small program

process can be characterized by that switches the
listing the sequence of instructions processor from
that execute for that process one process to
another

the behavior of the processor

can be characterized by
showing how the traces of the
various processes are
interleaved
Process
Execution
Traces of
Processes • Each process runs to completion

of Figure
3.2

Figure 3.3
Combined
Traces of
Processes
of Figure
3.2
 Two-State Process Model

• A process may be in one of two states:

• running
• not-running
Queuing Diagram
Table 3.1 Reasons for Process
Creation
 Process Creation

Process Parent
Child process
spawning process
• when the OS • is the • is the new
creates a original, process
process at creating,
the explicit process
request of
another
process
 Process Termination
•There must be a means for a process to
indicate its completion
•A batch job should include a HALT
instruction or an explicit OS service call
for termination
•For an interactive application, the action
of the user will indicate when the
process is completed (e.g. log off,
quitting an application)
Table 3.2

Reasons for
Process
Termination
Five-State Process Model
Process States for Trace of Figure 3.4
Using Two Queues
Multiple
Blocked
Queues
Suspended Processes
• Swapping
• involves moving part or all of a process from main
memory to disk
• when none of the processes in main memory is in
the Ready state, the OS swaps one of the blocked
processes out on to disk into a suspend queue to
make room for a new process, or a previously
suspended process that is now ready to execute
• Commonly used in systems that had no virtual
memory; less likely to be used with virtual memory
since process
size can be controlled through the
paging mechanism.
One Suspend State
Two Suspend States
 Characteristics of a Suspended
Process
• The process is not • The process may or
immediately available may not be waiting on
for execution an event

• The process was placed • The process may not be

in a suspended state by removed from this state
an agent: either itself, a until the agent explicitly
parent process, or the orders the removal
OS, for the purpose of
preventing its execution
Reasons for Process Suspension

Table 3.3 Reasons for Process Suspension

 Processes and Resources
What does the OS need to know to manage processes and
resources?
OS
Control
Tables
Memory Tables
• Used to keep track of both
main (real) and secondary Must include:
(virtual) memory
• Processes are maintained allocation of main memory to
on secondary memory using processes
some sort of virtual memory
or simple swapping allocation of secondary
mechanism memory to processes

protection attributes of blocks

of main or virtual memory

information needed to manage

virtual memory
I/O Tables If an I/O operation is
in progress, the OS
• Used by the OS to needs to know:
manage the I/O
devices and channels
the status of the I/O
of the computer operation
system
• At any given time, an
I/O device may be
the location in main
available or assigned memory being used as
to a particular process the source or destination
of the I/O transfer
 File Tables

• Information
may be
maintained
These tables provide information about:
and used by
a file • existence of files
management • location on secondary memory
system, or • current status
the OS itself • other attributes
Process Tables
• Must be maintained to manage processes
• Process tables must have some reference to
memory, I/O, and file tables
• e.g., pointers from each individual process entry to its
data in the other three sets of tables.
• The tables themselves must be accessible
by the OS and therefore are subject to
memory management
• Processes are represented by a process
image
Process Control Structures-PCB
Process Components Process Attributes

• Each process has associated

• A process must include a with it a number of attributes
program or set of programs that are used by the OS for
to be executed process control –maintained in
• A process will consist of at a Process Control Block (PCB)
least sufficient memory to • The collection of program,
hold the program(s) and data
of that process data, stack, and attributes is
• The execution of a program referred to as the process
typically involves a stack that image
is used to keep track of • Process image location will
procedure calls and depend on the memory
parameter passing between management scheme being
procedures used
Process Attributes
 Process Identification
• Each process is assigned • Memory tables may be organized
a unique numeric identifier to provide a map of main memory
with an indication of which process
• otherwise there must is assigned to each region
be a mapping that • similar references will appear in
allows the OS to locate I/O and file tables
the appropriate tables • When processes communicate
based on the process with one another, the process
identifier identifier informs the OS of the
• Many of the tables destination of a particular
controlled by the OS may communication
use process identifiers to • When processes are allowed to
cross-reference process create other processes, identifiers
indicate the parent and
tables descendents of each process
 Processor State Information
Consists of the Program status
contents of word (PSW)
processor
registers • contains condition
codes plus other status
• user-visible registers information
• control and status • EFLAGS register is an
registers example of a PSW used
• stack pointers by any OS running on an
x86 processor
X86 EFLAGS Register
Process Control Information
•The additional information needed by the
OS to control and coordinate the various
active processes
•Forms the 3rd part of the PCB (along with
process ID and processor state
information)
Typical
Elements
of a
Process
Control
Block
Structure of Process Images in Virtual
Memory
Process List Structures
Role of the Process Control Black
• The most important data structure in an OS
• contains all of the information about a process that
is needed by the OS
• blocks are read and/or modified by virtually every
module in the OS
• defines the state of the OS
• Difficulty is not access, but protection
• a bug in a single routine could damage process
control blocks, which could destroy the system’s
ability to manage the affected processes
• a design change in the structure or semantics of
the process control block could affect a number of
modules in the OS
 Modes of Execution

User Mode System Mode

• more-privileged
• less-privileged mode
mode • also referred to as
• user programs control mode or
typically execute in kernel mode
this mode • kernel of the
operating system
Table 3.7
Typical
Functions
of an
Operating
System
Kernel
Process Creation
• Once the OS decides to create a new process it:

assigns a unique process identifier to

the new process

allocates space for the process

initializes the process control block

sets the appropriate linkages

creates or expands other data

structures
Process (Context) Switching
A process switch may occur any time that the OS has gained control
from the currently running process. Possible events giving OS control
are:
 System Interrupts

Interrupt Trap
• Due to some sort of event • An error or exception
that is external to and condition generated within
independent of the the currently running
currently running process process
• clock interrupt • OS determines if the
• I/O interrupt condition is fatal
• memory fault • moved to the Exit state
• Time slice and a process switch
occurs
• the maximum amount of
time that a process can • action will depend on the
execute before being nature of the error
interrupted
Mode Switching

If no interrupts are If an interrupt is

pending the processor: pending the processor:

proceeds to the fetch stage and fetches

sets the program counter to the starting
the next instruction of the current
address of an interrupt handler program
program in the current process

switches from user mode to kernel

mode so that the interrupt processing
code may include privileged instructions
Mode Switching
•A mode switch is distinct from a process
switch.
•A mode switch can take place without
changing the state of the executing
process
•However, while processing a mode
switch the OS may decide a process
switch is needed; e.g., if the mode switch
was caused by a timer interrupt or a
process request for I/O
 Change of Process State

• The steps in a update the process move the process

full process save the context of control block of the control block of this
the processor process currently in process to the
switch are:
the Running state appropriate queue

If the currently running process is to be moved to

another state (Ready, Blocked, etc.), then the OS select another
process for
must make substantial changes in its environment execution

restore the context

of the processor to
that which existed at
the time the selected update memory update the process
process was last management data control block of the
switched out structures process selected
 Execution of
the Operating
System
Execution
Within User
Processes
Security Issues
• An OS associates a set of privileges with each
process
• Typically a process that executes on behalf of a
user has the privileges that the OS recognizes
for that user
• Highest level of privilege is referred to as
adminstrator, supervisor, or root access
• A key security issue in the design of any OS is
to prevent, or at least detect, attempts by a
user or a malware from gaining unauthorized
privileges on the system and from gaining root
access
 System Access Threats

Intruders Malicious Software

• Often referred to as a hacker or • Most sophisticated types of threats
cracker to computer systems

Classes: Categories:

• Masquerader • those that need a host program

(parasitic)
• Misfeasor
• viruses, logic bombs, backdoors
• Clandestine user
• those that are independent
• worms, bots
• Objective is to gain access to a
system or to increase the range of
privileges accessible on a system • Can be relatively harmless or very
damaging
• Attempts to acquire information
that should have been protected
 Countermeasures: Intrusion
Detection
• “A security service that monitors and analyzes system events
for the purpose of finding, and providing real-time or near real-
time warning of, attempts to access system resources in an
unauthorized manner” (RFC 2828)
• May be host or network based
• An intrusion detection system (IDS) comprises three logical
components:
user
sensors analyzers
interface
• IDSs are typically designed to detect human intruder behavior
as well as malicious software behavior
 Countermeasures:
Authentication
• “The process of verifying
an identity claimed by or
for a system entity.”
(RFC2828) something
the
• An authentication process individual
consists of two steps: knows
• Identification something
• Verification the
individual is
• Four general means of (static
authenticating a user’s biometrics)
identity: something the
something the individual does
individual (dynamic
possesses biometrics)
 Countermeasures: Access
Control
• Implements a security policy that specifies
who or what may have access to each specific
system resource and the type of access that is
permitted in each instance
• Mediates between a user and system
resources
• A security administrator maintains an
authorization database
• An auditing function monitors and keeps a
record of user accesses to system resources
Countermeasures: Firewalls
A • interfaces with computers
outside a network
dedicated • has special security
precautions built into it to
computer protect sensitive files on
computers within the network
that:

• all traffic must pass through

Design the firewall
• only authorized traffic will be
goals of a allowed to pass
• immune to penetration
firewall:
Unix SVR4
• Uses the model where most of the OS executes within the
environment of a user process
• Two process categories: system processes and user
processes
• System processes run in kernel mode
• executes operating system code to perform administrative
and housekeeping functions independent of any specific
user process.
• User Processes
• operate in user mode to execute user programs and
utilities
• operate in kernel mode to execute instructions that belong
to the kernel
• enter kernel mode by issuing a system call, when an
exception is generated, or when an interrupt occurs
UNIX Process States
UNIX Process State Transition
Diagram
A Unix
Process
Table 3.11
UNIX
Process
Table
Entry
Table 3.12
UNIX U
Area
 Process Creation
• Allocate a slot in the process table for the new process
• Process 1
creation is by
means of the 2
• Assign a unique process ID to the child process
kernel system
call, fork( ) • Make a copy of the process image of the parent, with the
3 exception of any shared memory
• This causes
the OS, in • Increments counters for any files owned by the parent, to
Kernel Mode, 4 reflect that an additional process now also owns those files
to:
• Assigns the child process to the Ready to Run state
5

• Returns the ID number of the child to the parent process, and

6 a 0 value to the child process
After Creation
• After creating the process the Kernel can do one
of the following, as part of the dispatcher
routine:
• stay in the parent process
• transfer control to the child process
• transfer control to another process
 Summary
 The most fundamental concept in a modern OS is the process
 The principal function of the OS is to create, manage, and terminate
processes
 Process control block contains all of the information that is required
for the OS to manage the process, including its current state,
resources allocated to it, priority, and other relevant data
 The most important states are Ready, Running and Blocked
 The running process is the one that is currently being executed by
the processor
 A blocked process is waiting for the completion of some event
 A running process is interrupted either by an interrupt or by
executing a supervisor call to the OS