  In this paper, by using the formal language \emph{Circus}, we give a formal
specification of an operating system based on ARINC 653 standard. Our
specification includes interrupt handling, time and memory management,
partition and process scheduling, system call response and related APEX
services. Especially, the concurrent behaviours of partitions and processes are
also specified.
