Siemens SIMATIC S7-1500 Manual page 35

Product overview
2.4 Firmware functions
Security information
Note
• Follow the Principle of Least Privilege.
• Start your application as a user without root privileges.
• Configure the SSH server in Linux Runtime in such a way that it only permits
certificate-based authentication. Disable password-based authentication for all users.
• Change the user passwords regularly and use secure passwords.
Note
IPv6 protocol
Note that for the CPU 1518(F)-4 PN/DP MFP, the IPv6 protocol is deactivated by default in the
configuration file (/usr/share/netfilter-persistent/plugins.d/12-ipv6-disable). To use IPv6,
remove this configuration file. Then carry out a restart so that the changes come into effect.
Ensure that your system is protected against unauthorized access by implementing
appropriate protective measures, e.g. the use of firewalls. If you do not use the IPv6 protocol
for communication, we recommend that you leave IPv6 deactivated.
Mass storage concept
Keep in mind the following information on the storage locations on the SIMATIC memory
card.
The following C/C++ Runtime containers are available in the "/CppEnv1.MFP" directory on the
SIMATIC memory card and are mounted in the file system in Linux as described:
• User.img (50 MB) → Mount point: "/home" (home directory of the user, for example, for
C/C++ Runtime application)
• Data.img (200 MB) → mount point: "/" (root) as overlays
Performing bulk operations
To use the same C/C++ Runtime application for other CPUs, transfer the C/C++ Runtime
application to the home directory. The home directory is available in the "User.img" file on
the SIMATIC memory card.
To use the C/C++ Runtime application on other CPUs, copy the "User.img" file to the
corresponding SIMATIC memory cards.
Work memory for C/C++ Runtime
The RAM is 1 GB including the RAM disk.
34
CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
Equipment Manual, 07/2021, A5E40882737-AB