container-seccomp

2022/03/09 OCHaCafe5 #3 Kubernetes のセキュリティ
コンテナセキュリティにおける権限制御
〜Seccompとかよくわからんけどとりあえずこれくらいはやっておこう〜

セッション動画
https://ochacafe.connpass.com/event/238355/

Transcript

1. 
   
   !NPDIJ[VLJ ίϯςφηΩϡϦςΟʹ͓͚Δݖݶ੍ޚ
   ʙ4FDDPNQͱ͔Α͘Θ͔ΒΜ͚ͲͱΓ͋͑ͣ͜Ε͘Β͍͸΍͓ͬͯ͜͏ʙ 0$)B$BGF
   
   ,VCFSOFUFT
   ͷηΩϡϦςΟ
2. !NPDIJ[VLJ /BNF
   ɹ,FJUB
   .PDIJ[VLJʢNPDIJ[VLJʣ
   
   XIPBNJ
3. /BNF
   ɹ,FJUB
   .PDIJ[VLJʢNPDIJ[VLJʣ
   
   XIPBNJ ͨ͵͖Ͱ͸ͳ͘
   ͖ͭͶͰ͢ɻ !NPDIJ[VLJ
4. ʹߦΘΕͨ$MPVE/BUJWF
   %BZT
   ʹͯొஃ͠ɺ
   ίϯςφηΩϡϦςΟʹؔ͢Δ͓࿩Λͤͯ͞௖͖·ͨ͠ɻ ಈը
   IUUQTFWFOUDMPVEOBUJWFEBZTKQDOEUUBMLT
   ࢿྉ
   IUUQTTQFBLFSEFDLDPNNPDIJ[VLJDPOUBJOFSEFWTFDVSJUZ ݟͯͶʂ
   XIPBNJ
5. 
   ͸͡Ίʹ ίϯςφͷηΩϡϦςΟΛߟ͑Δ্Ͱ͸ͦͷ࢓૊Έ্ɺ
   ίϯςφʹର͢Δݖݶ੍ޚΛཧղ͢Δ͜ͱ͕ॏཁͰ͢ɻ
   ຊ೔͸ݖݶ੍ޚͷதͰ΋ಛʹ4FDDPNQʹΑΔίϯςφϓϩηε͔ΒͷγεςϜίʔϧͷ
   ࣮ߦ੍ޚʹείʔϓΛ౰ͯɺͦͷجૅతͳ෦෼ʹؔ͢Δ͓࿩Λͤͯ͞௖͖·͢ɻ
6. ɾຊൃද͸αΠόʔ߈ܸΛߠఆ͢Δ΋ͷͰ͸͋Γ·ͤΜ
   ɾൃද಺Ͱ༻͍Δίϯςφͱ͍͏ݴ༿͸جຊతʹSVODͰ࣮ߦ͞ΕΔίϯςφΛࢦ͠·͢
   ɾܝࡌ಺༰͸ݸਓͷݟղͰ͋Γɺॴଐ͢Δاۀ΍૊৫ͷཱ৔ɺઓུɺҙݟΛ୅ද͢Δ΋ͷͰ͸͋Γ·ͤΜ
   ɾهࡌ͞Ε͍ͯΔձ໊ࣾɺ঎඼໊ɺ·ͨ͸αʔϏε໊͸ɺ֤ࣾͷ঎ඪొ࿥·ͨ͸঎ඪͰ͢
   ͸͡Ίʹ
7. 
   "HFOEB 
   ίϯςφͷִ཭
   
   ίϯςφʹ͓͚Δݖݶ੍ޚ
   
   γεςϜίʔϧͱ4FDDPNQ
   
   ,VCFSOFUFTʹ͓͚Δ4FDDPNQ
   
   ·ͱΊ
8. 
   
   ίϯςφͷִ཭ ίϯςφͷ࣮ଶ͸Χʔωϧ্Ͱ࣮ߦ͞ΕΔϓϩηεͰ͢ɻ 04 ,FSOFM 1SPDFTT 1SPDFTT 1SPDFTT
9. 
   
   ίϯςφͷִ཭ 04 ,FSOFM ίϯςφͷ࣮ଶ͸Χʔωϧ্Ͱ࣮ߦ͞ΕΔϓϩηεͰ͢ɻ
   ίϯςφʹ͋ͨΔϓϩηε͕Χʔωϧͷ༷࣋ͭʑͳػೳʹΑΓִ཭͞ΕΔ͜ͱͰɺίϯςφͱͯ͠ͷػೳ͕࣮ݱ͞Ε·͢ɻ 1SPDFTT SPPUGT 1SPDFTT SPPUGT 1SPDFTT SPPUGT ࣮ߦۭؒʢFY
   /BNFTQBDFɺQJWPU@SPPUʣ
   ɹϓϩηε͕ಈ࡞͢Δ؀ڥΛִ཭͔͋ͨ͠΋୯ମͰಈ͍͍ͯΔΑ͏ʹݟ͔͚ͤΔ
   Ϧιʔε࢖༻ྔʢFY
   $HSPVQʣ
   ɹϓϩηε͕࢖༻Ͱ͖ΔϦιʔεྔʢ$16 .FNPSZͳͲʣΛ੍ݶ͢Δ
   ݖݶʢޙड़ʣ
   ɹϓϩηεͷΧʔωϧʹର͢Δૢ࡞Λ੍ݶ͢Δ ίϯςφ
10. 
    
    ίϯςφʹ͓͚Δݖݶ੍ޚ ࣮ߦۭؒͷִ཭΍Ϧιʔε࢖༻ྔͷ੍ݶ͚ͩͰ͸ίϯςφϓϩηε͸04ʹର࣮ͯ͠ߦϢʔβʔ૬౰ͷݖݶΛ࣋ͭ͜ͱʹͳΓ·͢ɻ
    ˞ྫ͑͹ίϯςφΛಛʹҙࣝͤͣʹ࣮ߦͨ͠৔߹ɺίϯςφϓϩηε͸σϑΥϧτͷ࣮ߦϢʔβʔͰ͋ΔSPPUݖݶΛ࣋ͭ͜ͱʹͳΔ
    ίϯςφϓϩηε͕ա৒ͳݖݶΛ͍࣋ͬͯΔͱɺྫ͑͹ίϯςφͷִ཭؀ڥ͔Β֎෦ʹӨڹΛٴ΅͢ͱ͍ͬͨ
    ηΩϡϦςΟϦεΫʹܨ͕Γ·͢ɻʢFY
    $POUBJOFS
    #SFBL0VUʣ 04 ,FSOFM 1SPDFTT SPPUGT 1SPDFTT 1SPDFTT SPPU VTFS SPPU 04ʹରͯ͠
    ಛݖϢʔβʔ૬౰ͷ
    ͢΂ͷૢ࡞͕Մೳ 04ʹରͯ͠
    ҰൠϢʔβʔ૬౰ͷ
    ૢ࡞͕Մೳ ʢຊ೔͸ѻΘͳ͍͚Ͳॏཁͳʣิ଍
    ࣮ࡍͷͱ͜ΖίϯςφͰ͸ա౓ͳݖݶ͕ϓϩηεʹ෇༩͞ΕΔ͜ͱͷͳ͍Α͏ɺޙड़ͷ௨Γ༷ʑͳ࢓૊ΈΛ༻͍Δ͜ͱͰݖݶ੍ޚΛߦ͍ͬͯ·͢ɻ
    ͱ͸ݴ͑ίϯςφϓϩηε͕SPPUݖݶͰ࣮ߦ͞ΕΔ͜ͱ͸ҰൠతʹϦεΫͱΈͳ͞Ε͓ͯΓɺίϯςφ࣮ߦ࣌͸໌֬ʹඇಛݖϢʔβʔΛࢦఆ͢Δ͜ͱ͕
    ϕετϓϥΫςΟεͱ͞Ε͍ͯ·͢ɻ 04ʹରͯ͠
    ಛݖϢʔβʔ૬౰ͷ
    ͢΂ͷૢ࡞͕Մೳ ίϯςφʢݖݶ੍ޚͳ͠ʣ
11. 
    
    ίϯςφʹ͓͚Δݖݶ੍ޚ ͦ͜ͰίϯςφͰ͸-JOVYΧʔωϧͷ࣋ͭҎԼͷΑ͏ͳػೳΛ༻͍Δ͜ͱͰɺίϯςφϓϩηε͔ΒΧʔωϧʹର͢Δૢ࡞Λ੍ݶ ͢Δ࢓૊ΈΛ࠾༻͍ͯ͠·͢ɻ 3FBE0OMZ
    .PVOU $BQBCJMJUZ -4.
    "QQ"SNPS4&-JOVY 4FDDPNQ ػೳ
    ֓ཁ ಛఆͷϑΝΠϧγεςϜΛ3FBE0OMZͱ͠ ͯϚ΢ϯτ͢Δ࢓૊Έɻ SPPUϢʔβʔͷ࣋ͭݖݶʢಛݖʣΛࡉ෼ Խ͠ɺඞཁͳݖݶͷΈΛϓϩηεʹ෇༩ ͢Δ࢓૊Έɻ ϓϩηε͔ΒͷϑΝΠϧΞΫηεΛ੍ݶ͢Δ ࢓૊Έɻ
    ڧ੍ΞΫηε੍ޚͱݺ͹ΕDIPXO΍DINPE ʢ೚ҙΞΫηε੍ޚʣͷΑ͏ʹద༻͞Ε੍ͨ ݶΛมߋͰ͖ͳ͍ɻ ϓϩηε͔ΒΧʔωϧʹରͯ͠ൃߦͰ͖ ΔγεςϜίʔϧΛ੍ݶ͢Δ࢓૊Έɻ LTʹ͓͚Δ
    ద༻ঢ়گ 1PEσϓϩΠ࣌ʹಛఆͷϑΝΠϧγεςϜ ΛσϑΥϧτͰ30ͱͯ͠Ϛ΢ϯτ͢Δɻ ʢQSPD TZTGT DHSPVQʣ
    ˞EFWͳͲϗετͱϑΝΠϧγεςϜΛ ෼͚ͯӅṭ͢Δέʔε΋͋Δ 1PEσϓϩΠ࣌ʹίϯςφϓϩηεʹର ͯ͠σϑΥϧτͰ࠷௿ݶඞཁͳݖݶͷΈ Λ෇༩͢Δ 1PEσϓϩΠ࣌ʹσϑΥϧτͰ੍ޚ͕ద༻͞ ΕΔɻ
    ˞$3*΍ίϯςφϗετͷઃఆ࣍ୈͰ͸͋Δ ͕ɺ௨ৗ$3*σϑΥϧτͷ಺༰͕ద༻͞ΕΔ
    1PEσϓϩΠ࣌ʹ೚ҙͷઃఆΛ౉͢͜ͱ Ͱద༻Մೳɻ
    σϑΥϧτͰ͸੍ޚ͕ద༻͞Εͳ͍ɻ $PO fi HVSF
    B
    4FDVSJUZ
    $POUFYU
    GPS
    B
    1PE
    PS
    $POUBJOFS
    IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSTFDVSJUZDPOUFYU ˞ҼΈʹ%PDLFS΍1PENBOͰίϯςφΛσϓϩΠ͢Δ৔߹͸σϑΥϧτͰ4FDDPNQ͕ద༻͞Ε·͢
    ɹIUUQTEPDTEPDLFSDPNFOHJOFTFDVSJUZTFDDPNQ
    ɹIUUQTEPDTQPENBOJPFOMBUFTUNBSLEPXOQPENBOSVOIUNM IJHIMJHIUTFDDPNQTFDDPNQQPMJDZQPMJDZ
12. 
    
    γεςϜίʔϧͱ4FDDPNQ 🤔 ͦ΋ͦ΋4FDDPNQͬͯԿʁʁ σϑΥϧτͰద༻͞Εͳ͍ͷʹඞཁʁʁ
13. γεςϜίʔϧ
    ϓϩηε͕ಈ࡞͢Δ্ͰଞͷϓϩηεΛૢ࡞ͨ͠ΓϦιʔεʹΞΫηε͢Δࡍ͸ɺ
    γεςϜίʔϧͱݺ͹ΕΔ໋ྩΛΧʔωϧʹରͯ͠ൃߦ͢Δ͜ͱͰͦͷૢ࡞Λ࣮ݱ͠·͢ɻ
    
    γεςϜίʔϧͱ4FDDPNQ VCVOUVVTFS!VCVOUVTFSWFSd
    TUSBDF
    DBU
    UFTUUYU
    
    FYFDWF VTSCJODBU
    <DBU
    UFTUUYU>
    Y ff FFF
    
    
    WBST
    
    
    
    CSL /6--
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    YFC
    BSDI@QSDUM Y
    
    "3$)@
    
    Y ff FCBDG
    
    
    &*/7"-
    *OWBMJE
    BSHVNFOU
    BDDFTT FUDMETPQSFMPBE
    3@0,
    
    
    
    
    
    
    
    &/0&/5
    /P
    TVDI
    fi MF
    PS
    EJSFDUPSZ
    PQFOBU "5@'%$8%
    FUDMETPDBDIF
    0@3%0/-:c0@$-0&9&$
    
    
    GTUBU 
    \TU@NPEF4@*'3&(c
    TU@TJ[F
    ^
    
    
    NNBQ /6--
    
    1305@3&"%
    ."1@13*7"5&
    
    
    
    YGBFD
    ɾɾɾ
    SFBE 
    IFMMPaO
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    XSJUF 
    IFMMPaO
    IFMMP
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    SFBE 
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    NVONBQ YGB
    
    
    
    
    
    
    
    
    
    
    
    
    DMPTF 
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    DMPTF 
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    DMPTF 
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    FYJU@HSPVQ 
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    FYJUFE
    XJUI
    
    ʢྫʣDBUϓϩάϥϜͷ࣮ߦ͢ΔγεςϜίʔϧΛTUSBDFͰදࣔ γεςϜίʔϧͷྫ
    ɹFYFDWF ɿϓϩάϥϜͷ࣮ߦ
    ɹPQFOBU ɿϑΝΠϧͷΦʔϓϯ
    ɹDMPTF ɿϑΝΠϧσΟεΫϦϓλʔͷΫϩʔζ
    ɹNNBQ ɿϝϞϦͷ֬อ
    ɹNVONBQ ɿϝϞϦͷղ์
    ɹSFBE ɿϑΝΠϧσΟεΫϦϓλʔ͔ΒͷಡΈࠐΈ
    ɹXSJUF ɿϑΝΠϧσΟεΫϦϓλʔ΁ͷॻ͖ࠐΈ 1SPDFTT 04 ,FSOFM 4:4$"-- 1SPDFTT 4:4$"--
14. 4FDDPNQʢ4&$VS
    $0.1VUJOHʣ
    ϓϩηε͕࣮ߦՄೳͳγεςϜίʔϧΛ੍ݶ͢Δ͜ͱͰɺϓϩηεͷෆਖ਼ૢ࡞΍ҙਤͤ͵ڍಈʹର͢ΔηΩϡϦςΟ֬อΛ
    ࣮ݱ͢Δػೳɻ
    
    γεςϜίʔϧͱ4FDDPNQ 1SPDFTT 04 ,FSOFM TFDDPNQ 4:4$"-- 1SPDFTT TFDDPNQ VCVOUVVTFS!VCVOUVTFSWFSd
    DBUTFDDPNQ
    "QQMZ
    TFDDPNQ
    UP
    EFOZ
    PQFOBU 
    FYFD
    DBU
    UFTUUYU
    PQFOBU 
    EFOZ
    FSS ʢྫʣϓϩάϥϜ͔ΒPQFOBU Λېࢭͨ͠ঢ়ଶͰDBUΛ࣮ߦ ɾɾɾ
    FYFDWF CJOTI
    <TI
    D
    DBU
    UFTUUYU>
    Y ff DCCECF
    
    
    WBST
    
    
    
    CSL /6--
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    YCBCC
    BSDI@QSDUM Y
    
    "3$)@
    
    Y ff DDF
    
    
    &*/7"-
    *OWBMJE
    BSHVNFOU
    BDDFTT FUDMETPQSFMPBE
    3@0,
    
    
    
    
    
    
    
    &/0&/5
    /P
    TVDI
    fi MF
    PS
    EJSFDUPSZ
    PQFOBU "5@'%$8%
    FUDMETPDBDIF
    0@3%0/-:c0@$-0&9&$
    
    
    
    LJMMFE
    CZ
    4*(4:4
    DPSF
    EVNQFE
    DBUΛ࣮ߦ͍ͯ͠ΔՕॴͷTUSBDF݁Ռ 4:4$"-- ڐՄ͞ΕͨTZTDBMM͸
    ௨ৗ௨Γ࣮ߦ ېࢭ͞ΕͨTZTDBMM͸
    ࣮ߦ͠ͳ͍ TFDDPNQʹΑΓPQFOBU ͕ڋ൱͞Εͨ 
    ୈճ
    ίϯςφٕज़ͷ৘ใަ׵ձ!ΦϯϥΠϯ
    ʙTFDDPNQʙ
    IUUQTXXXZPVUVCFDPNXBUDI W((@$0PLCEX
15. DBUTFDDPNQD
    
    γεςϜίʔϧͱ4FDDPNQ JODMVEF
    TUEJPI
    JODMVEF
    VOJTUEI
    JODMVEF
    TZTUZQFTI
    JODMVEF
    TUEMJCI
    JODMVEF
    FSSOPI
    JODMVEF
    TUEEFGI
    JODMVEF
    MJOVYBVEJUI
    JODMVEF
    MJOVY fi MUFSI
    JODMVEF
    MJOVYTFDDPNQI
    JODMVEF
    TZTQSDUMI
    JODMVEF
    TZTTZTDBMMI
    JGOEFG
    TFDDPNQ
    JOU
    TFDDPNQ VOTJHOFE
    JOU
    PQ
    VOTJHOFE
    JOU
    fl BHT
    WPJE
    BSHT
    \
    
    
    
    
    FSSOP
    
    
    
    
    
    
    SFUVSO
    TZTDBMM @@/3@TFDDPNQ
    PQ
    fl BHT
    BSHT 
    
    ^
    FOEJG
    
    #1'ͰTFDDPNQϧʔϧΛఆٛʢTZTDBMMͷڐՄېࢭΛఆٛʣ
    TUSVDU
    TPDL@ fi MUFS
    fi MUFS<>
    
    \
    
    
    
    
    #1'@45.5 #1'@-%
    c
    #1'@8
    c
    #1'@"#4
    P ff TFUPG TUSVDU
    TFDDPNQ@EBUB
    BSDI
    
    
    
    
    #1'@+6.1 #1'@+.1
    c
    #1'@+&2
    c
    #1'@,
    "6%*5@"3$)@9@
    
    
    
    
    
    
    #1'@45.5 #1'@-%
    c
    #1'@8
    c
    #1'@"#4
    P ff TFUPG TUSVDU
    TFDDPNQ@EBUB
    OS
    
    
    
    
    #1'@+6.1 #1'@+.1
    c
    #1'@+&2
    c
    #1'@,
    @@/3@PQFOBU
    
    
    
    
    ϑΟϧλʔ͢ΔTZTDBMMʹPQFOBU  Λࢦఆ
    
    
    
    
    #1'@45.5 #1'@3&5
    c
    #1'@,
    4&$$0.1@3&5@,*--
    
    
    
    
    #1'@45.5 #1'@3&5
    c
    #1'@,
    4&$$0.1@3&5@"--08
    ^ TUSVDU
    TPDL@GQSPH
    QSPH
    
    \
    
    
    
    
    MFO
    
    VOTJHOFE
    TIPSU
    TJ[FPG fi MUFS
    
    TJ[FPG fi MUFS<>
    
    
    
    
     fi MUFS
    
    fi MUFS
    
    ^
    JOU
    NBJO WPJE \
    
    
    
    
    JOU
    FSS
    
    
    
    
    JG
    QSDUM 13@4&5@/0@/&8@13*74
    
    
    
    
    \
    
    
    
    
    
    
    
    
    QFSSPS QSDUM 
    
    
    
    
    
    
    
    
    FYJU &9*5@'"*-63& 
    
    
    
    
    ^
    
    
    
    
    
    TFDDPNQద༻ PQFOBU  Λېࢭ͢ΔϑΟϧλʔΛઃఆ
    
    
    
    
    QSJOUG TaO
    "QQMZ
    TFDDPNQ
    UP
    EFOZ
    PQFOBU   
    
    
    
    
    JG
    TFDDPNQ 4&$$0.1@4&5@.0%&@'*-5&3
    
    QSPH
    \
    
    
    
    
    
    
    
    
    QFSSPS TFDDPNQ 
    
    
    
    
    ^
    
    
    
    
    
    TFDDPNQద༻ޙʹDBUΛ࣮ߦ
    
    
    
    
    QSJOUG TaO
    FYFD
    DBU
    UFTUUYU 
    
    
    
    
    JG FSS
    
    TZTUFN DBU
    UFTUUYU \
    
    
    
    
    
    
    
    
    QSJOUG PQFOBU 
    EFOZ
    FSSEaO FSS 
    
    
    
    
    
    
    
    
    
    
    
    
    SFUVSO
    
    
    
    
    
    ^
    
    
    
    
    SFUVSO
    
    ^ ʢࢀߟʣPQFOBU Λېࢭͨ͠ঢ়ଶͰDBUΛ࣮ߦ͢ΔϓϩάϥϜ
16. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ ,VCFSOFUFTͰ͸ίϯςφϓϩηεʹରͯ͠ڐՄېࢭ͢ΔγεςϜίʔϧΛ4FDDPNQϓϩϑΝΠϧͱͯ͠ఆٛͰ͖·͢ɻ
    ίϯςφʢ1PEʣΛσϓϩΠ͢Δࡍʹಛఆͷ4FDDPNQϓϩϑΝΠϧΛࢦఆ͢Δ͜ͱͰ
    ίϯςφϓϩηεʹର͢ΔγεςϜίʔϧͷ੍ݶ͕ՄೳͰ͢ɻ
    1PEʹ4FDDPNQΛద༻͢Δ͜ͱ͸,VCFSOFUFTެࣜͷϓϥΫςΟεͰ΋ਪ঑͞ΕΔࣄ߲ͱͳ͍ͬͯ·͢ɻ 04 ,FSOFM 1SPDFTT 1SPDFTT 1SPDFTT TFDDPNQ
    QSP fi MF
    " TFDDPNQ
    QSP fi MF
    # TFDDPNQ TFDDPNQ QSP fi MF
    "Ͱ
    ڐՄ͞ΕͨTZTDBMMͷΈ શͯͷTZTDBMM QSP fi MF
    #Ͱ
    ڐՄ͞ΕͨTZTDBMMͷΈ $BQBCJMJUZͳͲଞͷݖݶ੍ޚͰ੍ݶ͞Εͨ΋ͷ͸আ͘ ɾ1PEʹର͢Δ4FDDPNQͷద༻͸,VCFSOFUFT
    Wʹ͓͍ͯTUBCMFͱͳͬͨൺֱత৽͍͠ػೳ
    ɾ,VCFSOFUFT
    WݱࡏͰ͸1PEσϓϩΠ࣌ʹ໌ࣔ͠ͳ͍ݶΓద༻͞Εͳ͍
    ɾ4FDDPNQͱ͸ผʹ$BQBCJMJUZͰ΋ίϯςφϓϩηεʹର͢Δݖݶ੍ޚ͕͞Ε͍ͯΔ 1PE
    4FDVSJUZ
    4UBOEFSE
    IUUQTLVCFSOFUFTJPEPDTDPODFQUTTFDVSJUZQPETFDVSJUZTUBOEBSET
17. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ 4FDDPNQ͕ޮՌΛൃشͨ͠ྫʢ-JOVYΧʔωϧͷ੬ऑੑɿ$7&ʣ ೥݄ʹ-JOVYΧʔωϧʹ੬ऑੑ͕ൃݟ͞Εͨɻ
    '*MFTZTUFN
    $POUFYUγεςϜ GTGT@DPOUFYUD ಺ͷؔ਺Λѱ༻ͯ͠όοϑΝΦʔόʔϑϩʔΛҾ͖ى͜͢͜ͱͰɺ
    %P4߈ܸ΍$POUBJOFS
    #SFBLPVUʹܨ͛Δ͜ͱ͕Ͱ͖Δɻ
    ͜ͷ߈ܸʹ͸ɺ௨ৗ1PEىಈ࣌ʹίϯςφϓϩηε͔Βണୣ͞ΕΔ$"1@4:4@"%.*/ͱ͍͏ݖݶʢ$BQBCJMJUZʣ͕ඞཁʹͳΔ͕ɺ
    ίϯςφ಺ͰVOTIBSFͱݺ͹ΕΔγεςϜίʔϧΛ࣮ߦ͢Δ͜ͱͰ͜ͷݖݶΛऔಘͰ͖ͯ͠·͏ɻ
    VOTIBSFΛېࢭ͢Δ4FDDPNQΛద༻͍ͯ͠Ε͹ɺ͜ͷϦεΫ͸๷͙͜ͱ͕Ͱ͖ͨͱݴ͑·͢ɻ
    ˞ຊ੬ऑੑ͸طʹमਖ਼ࡁΈͰ͢ɻ 04 ,FSOFM 1SPDFTT 1SPDFTT
    $"1@4:4@"%.*/ VOTIBSF
    S
    CJOCBTI "55"$,ʂʂ 1SPDFTT TFDDPNQ
    QSP fi MF TFDDPNQ VOTIBSF
    S
    CJOCBTI
18. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ $7&
    IUUQTDWFNJUSFPSHDHJCJODWFOBNFDHJ OBNF$7&
    $7&
    JO
    -JOVY
    ,FSOFM
    $BO
    "MMPX
    $POUBJOFS
    &TDBQF
    JO
    ,VCFSOFUFT
    IUUQTCMPHBRVBTFDDPNDWFMJOVYLFSOFMDPOUBJOFSFTDBQFJOLVCFSOFUFT
    $SVTBEFSTPG3VTU$7&
    IUUQTHJUIVCDPN$SVTBEFSTPG3VTU$7&
19. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ 1PE΁ͷ4FDDPNQద༻ํ๏͸ҎԼͷύλʔϯͰ͢ɻ ᶃ$3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻
    ᶄಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ 3FTUSJDU
    B
    $POUBJOFST
    4ZTDBMMT
    XJUI
    TFDDPNQ
    IUUQTLVCFSOFUFTJPEPDTUVUPSJBMTTFDVSJUZTFDDPNQ
20. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ
    ᶃ$3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻ $3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻
    ɹDPOUBJOFSE΍DSJP͸$3*ϥϯλΠϜͱͯ͠σϑΥϧτͷ4FDDPNQ
    QSP fi MFΛ͍࣋ͬͯ·͢ɻ
    ɹ͜ΕΛ1PEσϓϩΠ࣌ʹద༻͢Δ͜ͱͰɺίϯςφϓϩηε͔Β࣮ߦՄೳͳγεςϜίʔϧ੍͕ݶ͞ΕΔΑ͏ʹͳΓ·͢ɻ
    ɹಛผཁ͕݅ͳ͍ݶΓ͸ͪ͜ΒΛద༻͓ͯ͘͜͠ͱͰϥϯλΠϜͷఆٛ͢Δ࠷௿ݶͷηΩϡϦςΟ͸֬อͰ͖Δ͜ͱʹͳΓ·͢ɻ BQJ7FSTJPO
    W
    LJOE
    1PE
    NFUBEBUB
    
    
    MBCFMT
    
    
    
    
    SVO
    TFDDPNQQPE
    
    
    OBNF
    TFDDPNQQPE
    TQFD
    
    
    TFDVSJUZ$POUFYU
    
    
    
    
    TFDDPNQ1SP fi MF
    
    
    
    
    
    
    UZQF
    3VOUJNF%FGBVMU
    
    
    DPOUBJOFST
    
    
    
    JNBHF
    VCVOUV
    
    
    
    
    OBNF
    VCVOUV
    
    
    
    
    DPNNBOE
    <CJOTI
    D
    XIJMF
    
    EP
    TMFFQ
    
    EPOF>
    TFDDPNQQPEZNM <$3*ϥϯλΠϜσϑΥϧτͷ4FDDPNQϓϩϑΝΠϧ>
    DPOUBJOFSE
    IUUQTHJUIVCDPNDPOUBJOFSEDPOUBJOFSECMPCBFGDDGBBBDEEDPOUSJCTFDDPNQ TFDDPNQ@EFGBVMUHP-
    DSJP
    IUUQTHJUIVCDPNDSJPDSJPCMPCGFEWFOEPSHJUIVCDPNDPOUBJOFSTDPNNPOQLHTFDDPNQEFGBVMU@MJOVYHP- $3*ϥϯλΠϜσϑΥϧτͷ
    TFDDPNQϓϩϑΝΠϧΛద༻ $SFBUF
    1PE
    UIBU
    VTFT
    UIF
    DPOUBJOFS
    SVOUJNF
    EFGBVMU
    TFDDPNQ
    QSP fi MF
    IUUQTLVCFSOFUFTJPEPDTUVUPSJBMTTFDVSJUZTFDDPNQDSFBUFQPEUIBUVTFTUIFDPOUBJOFSSVOUJNFEFGBVMUTFDDPNQQSP fi MF
21. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ
    ᶃ$3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻ ʢࢀߟʣ,VCFSOFUFTʹ͓͚Δ4FDDPNQͷσϑΥϧτద༻
    ɹݱࡏ,&1ʹͯ1PEσϓϩΠ࣌ʹσϑΥϧτͰ$3*ϥϯλΠϜσϑΥϧτͷ4FDDPNQϓϩϑΝΠϧΛద༻͢Δ͜ͱ͕
    ɹݕ౼͞Ε͍ͯ·͢ɻ
    ɹ˞,VCFSOFUFT
    Wʹ͓͍ͯຊػೳ͸BMQIBػೳͱͯ͠ϦϦʔε͞Ε͓ͯΓɺLVCFMFUͷGFBUVSF
    HBUFΛ༗ޮʹ͢Δ͜ͱͰར༻Մೳ
    ɹ,&1
    &OBCMF
    TFDDPNQ
    CZ
    EFGBVMU
    ɹIUUQTHJUIVCDPNLVCFSOFUFTFOIBODFNFOUTUSFFBDDLFQTTJHOPEFTFDDPNQCZEFGBVMUVQHSBEFEPXOHSBEFTUSBUFHZ
    ɹ&OBCMF
    UIF
    VTF
    PG
    3VOUJNF%FGBVMU
    BT
    UIF
    EFGBVMU
    TFDDPNQ
    QSP fi MF
    GPS
    BMM
    XPSLMPBET
    ɹIUUQTLVCFSOFUFTJPEPDTUVUPSJBMTTFDVSJUZTFDDPNQFOBCMFUIFVTFPGSVOUJNFEFGBVMUBTUIFEFGBVMUTFDDPNQQSP fi MFGPSBMMXPSLMPBET
    ɹ&OBCMF
    TFDDPNQ
    GPS
    BMM
    XPSLMPBET
    XJUI
    B
    OFX
    W
    BMQIB
    GFBUVSF
    ɹIUUQTLVCFSOFUFTJPCMPHTFDDPNQEFGBVMU
22. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ
    ᶄಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ ಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻
    ɹ$3*σϑΥϧτΑΓ΋ηΩϡϦςΟΛߴΊ͍ͨɺಠࣗͷϫʔΫϩʔυʹରԠ͍ͤͨ͞ͱ͍͏৔߹͸
    ɹڐՄېࢭ͢ΔγεςϜίʔϧΛهࡌͨ͠4FDDPNQϓϩϑΝΠϧΛίϯςφϗετʹ഑ஔ͠1PEσϓϩΠ࣌ʹద༻͢Δ͜ͱͰɺ
    ɹίϯςφϓϩηεʹಠࣗͷ4FDDPNQ͕ద༻͞Εҙਤͨ͠γεςϜίʔϧͷ࣮ߦͷΈ͕ڐՄ͞ΕΔΑ͏ʹͳΓ·͢ɻ BQJ7FSTJPO
    W
    LJOE
    1PE
    NFUBEBUB
    
    
    MBCFMT
    
    
    
    
    SVO
    TFDDPNQQPE
    
    
    OBNF
    TFDDPNQQPE
    TQFD
    
    
    TFDVSJUZ$POUFYU
    
    
    
    
    TFDDPNQ1SP fi MF
    
    
    
    
    
    
    UZQF
    -PDBMIPTU
    
    
    
    
    
    
    MPDBMIPTU1SP fi MF
    QSP fi MFTTBNQMFTFDDPNQKTPO
    
    
    DPOUBJOFST
    
    
    
    JNBHF
    VCVOUV
    
    
    
    
    OBNF
    VCVOUV
    
    
    
    
    DPNNBOE
    <CJOTI
    D
    XIJMF
    
    EP
    TMFFQ
    
    EPOF> TFDDPNQQPEZNM \
    
    
    
    
    EFGBVMU"DUJPO
    4$.1@"$5@&33/0
    
    
    
    
    BSDIJUFDUVSFT
    <
    
    
    
    
    
    
    
    
    4$.1@"3$)@9@
    
    
    
    
    
    
    
    
    4$.1@"3$)@9
    
    
    
    
    
    
    
    
    4$.1@"3$)@9
    
    
    
    
    >
    
    
    
    
    TZTDBMMT
    <
    
    
    
    
    
    
    
    
    \
    
    
    
    
    
    
    
    
    
    
    
    
    OBNFT
    <
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    NNBQ
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    SFBE
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    XSJUF
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    DMPTF
    ɾɾɾ
    
    
    
    
    
    
    
    
    
    
    
    
    >
    
    
    
    
    
    
    
    
    
    
    
    
    BDUJPO
    4$.1@"$5@"--08
    
    
    
    
    
    
    
    
    ^
    
    
    
    
    >
    ^ TBNQMFTFDDPNQKTPO ಠࣗͷTFDDPNQϓϩϑΝΠϧΛద༻ ڐՄ͢ΔTZTDBMMΛఆٛ ˞4FDDPNQϓϩϑΝΠϧΛ֤/PEFͷWBSMJCLVCFMFUTFDDPNQQSP fi MFTʹ഑ஔ͢Δ
23. 
    
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQ
    ᶄಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ ʢࢀߟʣTFDVSJUZQSP fi MFTPQFSBUPS
    ɹ,VCFSOFUFTʹ͓͍ͯಠࣗͷ4FDDPNQϓϩϑΝΠϧΛѻ͏ͷ͸ҎԼͷ؍఺͔Β݁ߏେมͰ͢ɻ
    ɹɹɾඞཁͳγεςϜίʔϧͷચ͍ग़͠
    ɹɹɾ4FDDPNQϓϩϑΝΠϧͷ࡞੒
    ɹɹɾ֤ίϯςφϗετ΁ͷ4FDDPNQϓϩϑΝΠϧ഑ஔ
    ɹͦ͜Ͱ4FDDPNQϓϩϑΝΠϧͷࣗಈੜ੒΍$3ԽʹΑΓ,VCFSOFUFT্Ͱͷ4FDDPNQͷѻ͍ΛϥΫʹͯ͘͠ΕΔ
    ɹTFDVSJUZQSP fi MFTPQFSBUPSͱ͍͏0QFSBUPS͕։ൃ͞Ε͍ͯ·͢ɻ
    ɹLVCFSOFUFTTJHTTFDVSJUZQSP fi MFTPQFSBUPS
    ɹIUUQTHJUIVCDPNLVCFSOFUFTTJHTTFDVSJUZQSP fi MFTPQFSBUPS
    ɹ4FDVSF
    ZPVS
    ,VCFSOFUFT
    EFQMPZNFOUT
    XJUI
    F#1'
    ɹIUUQTEFWFMPQFSTSFEIBUDPNBSUJDMFTTFDVSFZPVSLVCFSOFUFTEFQMPZNFOUTFCQG
    ɹ
    TFDVSJUZQSP fi MFTPQFSBUPSΛ͞ΘͬͯΈͨ
    ɹIUUQTTQFBLFSEFDLDPNPLFQZUSZTFDVSJUZQSP fi MFTPQFSBUPS
24. 
    
    ·ͱΊ ίϯςφʹ͓͚Δݖݶ੍ޚ
    ɹɾίϯςφͰ͸ϓϩηεִ཭ͷҰ؀ͱͯ͠ݖݶ੍ޚΛߦ͍ͬͯΔ
    4FDDPNQʹ͍ͭͯͷ֓ཁ
    ɹɾ4FDDPNQͱ͸Χʔωϧʹର͢ΔγεςϜίʔϧΛ੍ݶ͢Δ࢓૊Έ
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQద༻ํ๏ͱҙٛ
    ɹɾ4FDDPNQͱ͔Α͘Θ͔ΒΜ͚ͲͱΓ͋͑ͣ͜Ε͘Β͍͸΍͓ͬͯ͜͏
    
25. 
    
    ·ͱΊ ίϯςφʹ͓͚Δݖݶ੍ޚ
    ɹɾίϯςφͰ͸ϓϩηεִ཭ͷҰ؀ͱͯ͠ݖݶ੍ޚΛߦ͍ͬͯΔ
    4FDDPNQʹ͍ͭͯͷ֓ཁ
    ɹɾ4FDDPNQͱ͸Χʔωϧʹର͢ΔγεςϜίʔϧΛ੍ݶ͢Δ࢓૊Έ
    ,VCFSOFUFTʹ͓͚Δ4FDDPNQద༻ํ๏ͱҙٛ
    ɹɾ4FDDPNQͱ͔Α͘Θ͔ΒΜ͚ͲͱΓ͋͑ͣ͜Ε͘Β͍͸΍͓ͬͯ͜͏
    ɹɹˠಛʹཧ༝͕ͳ͚Ε͹3VOUJNF%FGBVMUΛద༻ͯ͠ෆཁͳγεςϜίʔϧ͕ൃߦ͞ΕΔηΩϡϦςΟϦεΫΛͳͦ͘͏
26. $POUBJOFS
    4FDVSJUZ
    #PPL
    IUUQTDPOUBJOFSTFDVSJUZEFWTFDVSJUZCSFBLPVUUPIPTUIUNM
    %PDLFS,VCFSOFUFT
    ։ൃɾӡ༻ͷͨΊͷηΩϡϦςΟ࣮ફΨΠυ
    IUUQTCPPLNZOBWJKQFDQSPEVDUTEFUBJMJE
    ίϯςφٕज़ೖ໳
    
    Ծ૝Խͱͷҧ͍Λ஌Γɺཁૉٕज़Λ৮ֶͬͯ΅͏
    IUUQTFIDBSFFSDPNFOHJOFFSIVCFOUSZ
    ࢀߟ
27. ຖि༵ۚdʹ,VCFSOFUFT$MPVE
    /BUJWFؔ࿈ͷ࿩୊Λ:PV5VCFੜ഑৴ʹͯࡶஊܗࣜͰ഑৴͍ͯ͠·͢ɻ
    ͓͕࣌ؒ͋Ε͹ੋඇ͝ࢹௌ͍ͩ͘͞ʂʢήετͰͷ͝ࢀՃ΋͓଴͍ͪͯ͠·͢ʣ
    એ఻ IUUQTLVCFOFXTDPOOQBTTDPN !NPDIJ[VLJ !BOUJCFSJBM !CFMMT@ !JU@@DIBHP !63ZP@
28. 5IBOL
    :PV