メインライン化のご報告

Transcript

1. ϝΠϯϥΠϯԽͷ͝ใࠂ 2009೥7݄3೔ TOMOYO LinuxϓϩδΣΫτ ݪాقӫ haradats@gmai.com
2. ͸͡Ίʹ ձ৔ʹ͍ͭͯ ษڧձʹ͍ͭͯձ৔Λ͝ఏڙ͍͍ͨͩͨ೔ຊ SGI༷ʹײँ͠·͢ (_ _) ࠙਌ձʹ͍ͭͯ༧໿Λ͝շ୚͍͖ͨͩ·ͨۜ͠ ࠲ϥΠΦϯ༷ʹײँ͠·͢ (_ _??
3. ͔͠͠ࠔͬͨ طʹ΄ͱΜͲͷ৘ใ͕ެ։͞Ε͍ͯΔ औΓ૊Έͷৄࡉ͸ʮ͸ͯͳΩʔϫʔυʯʹ શߨԋࢿྉ͸ʮϓϩδΣΫτͷจॻஔ͖৔ʯʹ ϝΠϯϥΠϯԽͷܦҢ͸ZDNet, ThinkITͷ هࣄʹ
5. ͜Μͳʹެ։͢ΔΜ͡Όͳ͔ͬ ͨɾɾɾ
6. ͜Μͳʹެ։͢ΔΜ͡Όͳ͔ͬ ͨɾɾɾ ޙչͯ͠Ͳ͏͢Δ
7. ͜͏ߟ͑ͨ
8. ͜͏ߟ͑ͨ ݶΒΕͨ࣌ؒɺจࣈ਺Ͱɺࣗ෼ͷؾ࣋ͪΛڽॖ͠ ͯ఻͑Δɾɾɾ
9. ͜͏ߟ͑ͨ ݶΒΕͨ࣌ؒɺจࣈ਺Ͱɺࣗ෼ͷؾ࣋ͪΛڽॖ͠ ͯ఻͑Δɾɾɾ ͦ͏ͩʂആ۟ͩ?
10. ʮ͕ͯͨ͞͠ɹࣗ෼Ͱ࢖͑Δɹ֦ுΛʯ
11. ʮ͕ͯͨ͞͠ɹࣗ෼Ͱ࢖͑Δɹ֦ுΛʯ 2003೥R&DͷςʔϚͱͯ͠औΓ૊ΈΛ։࢝
12. ʮ͕ͯͨ͞͠ɹࣗ෼Ͱ࢖͑Δɹ֦ுΛʯ 2003೥R&DͷςʔϚͱͯ͠औΓ૊ΈΛ։࢝ ౰࣌طʹSELinux͸ଘࡏ͍ͯ͠·ͨ͠
13. ʮ͕ͯͨ͞͠ɹࣗ෼Ͱ࢖͑Δɹ֦ுΛʯ 2003೥R&DͷςʔϚͱͯ͠औΓ૊ΈΛ։࢝ ౰࣌طʹSELinux͸ଘࡏ͍ͯ͠·ͨ͠ ʮྑͦ͞͏͚ͩΕͲ΋࣮ࡍʹ࢖͏ͷ͸೉͠ ͍ʯͱࢥ͍·ͨ͠
14. ʮ͕ͯͨ͞͠ɹࣗ෼Ͱ࢖͑Δɹ֦ுΛʯ 2003೥R&DͷςʔϚͱͯ͠औΓ૊ΈΛ։࢝ ౰࣌طʹSELinux͸ଘࡏ͍ͯ͠·ͨ͠ ʮྑͦ͞͏͚ͩΕͲ΋࣮ࡍʹ࢖͏ͷ͸೉͠ ͍ʯͱࢥ͍·ͨ͠ ௐ΂ͳ͕Βɺࢼߦࡨޡ͠ͳ͕Β
15. ࠷ѱͷঢ়گ͔Βͷελʔτ طʹSELinux͕Ϛʔδ͞Ε͍ͯͨʢ୭͕NSAͱ SELinuxʹউͯΔͩΖ͏͔ʁʣ ͔͠΋AppArmor͕ઌʹઓ͍ͬͯͨ ৔͸ΊͪΌΊͪΌʹߥΕɺਓ৺͸͢͞ΜͰ͍ͨ ʮ·͔ͨʂʯʮաڈϩάಡΊʢ͝Δ͊ʣʂʯ
16. Time to Glean MAC for Linux, history and the future July 25, 2008 Toshiharu Harada <haradats@nttdata.co.jp> Kentaro Takeda Tetsuo Handa NTT DATA CORPORATION
17. past now AppArmor, Smack and TOMOYO which is which? guess! guess! guess!
18. past now AppArmor, Smack and TOMOYO which is which? guess! guess!
19. past now AppArmor, Smack and TOMOYO which is which? guess!
20. past now AppArmor, Smack and TOMOYO which is which?
21. past now AppArmor, Smack and TOMOYO which is which?
22. Linus͕੾Εͨ James Morris͍Θ͘ ʮͲ͏΍ΒଞͷηΩϡϦςΟϞδϡʔϧ͕ ͳ͍Α͏͔ͩΒɺLSM΋΍Ί·͠ΐ͏ʯ Linus͍Θ͘ ʮLSM͸ͳ͘͞ͳ͍ɻͦΜͳ͜ͱݴ͏ͳΒ AppArmorͱ͔SmackϚʔδ͢Δͧʯ
24. ͱ͍͏΍ΓͱΓΛ௨ۈ్தͷ౦ւಓઢͷதͰಡΉ ʢܞଳͰʣ
25. ͱ͍͏΍ΓͱΓΛ௨ۈ్தͷ౦ւಓઢͷதͰಡΉ ʢܞଳͰʣ ձࣾʹண͘ͱ࠲ΔલʹϝϯόʔΛूΊΔ
26. ͱ͍͏΍ΓͱΓΛ௨ۈ్தͷ౦ւಓઢͷதͰಡΉ ʢܞଳͰʣ ձࣾʹண͘ͱ࠲ΔલʹϝϯόʔΛूΊΔ ʮύονΛ࡞ͬͯ౤ߘ͠Α͏ʂʯ
27. ͱ͍͏΍ΓͱΓΛ௨ۈ్தͷ౦ւಓઢͷதͰಡΉ ʢܞଳͰʣ ձࣾʹண͘ͱ࠲ΔલʹϝϯόʔΛूΊΔ ʮύονΛ࡞ͬͯ౤ߘ͠Α͏ʂʯ ʮͪΌ͔ͬΓͨ͠΍ͭΒͩʯͱসΘΕΔ
28. ϝΠϯϥΠϯԽੜ׆
29. ϝΠϯϥΠϯԽੜ׆ ͱʹ͔͘ϝʔϧΛಡΉ
30. ϝΠϯϥΠϯԽੜ׆ ͱʹ͔͘ϝʔϧΛಡΉ ঢ়گʢۭؾʣΛಡΉ
31. ϝΠϯϥΠϯԽੜ׆ ͱʹ͔͘ϝʔϧΛಡΉ ঢ়گʢۭؾʣΛಡΉ ࡞ઓΛߟ͑ɺύονΛ౤͛Δ
32. ϝΠϯϥΠϯԽੜ׆ ͱʹ͔͘ϝʔϧΛಡΉ ঢ়گʢۭؾʣΛಡΉ ࡞ઓΛߟ͑ɺύονΛ౤͛Δ ௜Ήɺ଱͑Δ
33. ϝΠϯϥΠϯԽੜ׆ ͱʹ͔͘ϝʔϧΛಡΉ ঢ়گʢۭؾʣΛಡΉ ࡞ઓΛߟ͑ɺύονΛ౤͛Δ ௜Ήɺ଱͑Δ ઌ಄ʢઓಆʣʹ໭Δ
34. ࠷େͷةػΛ௒͑Δ ͪΌ͔ͬΓఏҊ͸࢒೦ͳ͕Β࠾༻͞Εͳ͔͕ͬͨ ͦΕҎ߱SELinuxਞӦ͸੩͔ʹͳͬͨ Smack͕Ϛʔδ͞Εͯɺ୭΋͕ʮຊ౰ʹSELinux Ҏ֎΋ϚʔδͰ͖ΔΜͩʯͱࢥͬͨ ͋Γ͕ͱ͏ɺJames Morris (T_T)
35. গͣͭ͠ϓϩάϥϜ͕ܗʹͳ͖ͬͯͯɺLinux ConferenceͳͲͰൃද͢ΔΑ͏ʹͳΓ·ͨ͠ ͋ͷࠒʮ͍ͭެ։͢ΔΜͰ͔͢ʁʯͱฉ͔ΕΔͷ ͕ਏ͔ͬͨ ൒ా͞Μʹʮ͍ͭʹͳΔ͔͸Θ͔Βͳ͍͚Ε Ͳɺ͖ͬͱެ։͢Δʯͱ໿ଋ͠·ͨ͠
36. 2005೥11݄11೔ VA Linux Kernel Conference 2005Ͱ ʮTOMOYO Linux΁ͷಓʯͱͯ͠ߨԋΛ͢Δ ·͞ʹͦͷ೔ ଴ͪ๬ΜͰ͍ͨެ։ͷܾࡋ͕͓Γ·ͨ͠ ߨԋձ৔Ͱ࠷ॳͷόʔδϣϯΛΞοϓϩʔυ
37. ໊લʹ͍ͭͯ ·͔͞ʮ͋Ε΄Ͳʯ൓ڹ͕͋Δͱ͸ɾɾɾ ެ։௚ޙͷpage viewه࿥͕ߋ৽͞Εͨͷ ͸ɺ2೥3ϲ݄ޙͰ͢
39. ʮdisΒΕͯ ૉ௚ʹҙݟ ฉ͖·ͨ͠ʯ TOMOYOͷϝΠϯϥΠϯԽ͸ʮ༩͑ΒΕͨ໨ඪʯ Ͱͨ͠ શ͘ͷ૝ఆ֎Ͱ͋ΓɺͦΜͳ͜ͱ͕Մೳͱ͸ ࢥ͍ͬͯ·ͤΜͰͨ͠ ݁Ռతʹ͸ɺίϛϡχςΟͷ੠͕NTTσʔλͱ͍ ͏ձࣾͷऔΓ૊ΈΛม͑ͨͷͰ͢
41. Ͱ͖Δͱࢥ͍ͬͯͳ͔ͬͨ͜ͱ͕Ͱ͖·ͨ͠
42. Ͱ͖Δͱࢥ͍ͬͯͳ͔ͬͨ͜ͱ͕Ͱ͖·ͨ͠ Χʔωϧαϛοτʹݺ͹ΕΔʢসʣ
43. Ͱ͖Δͱࢥ͍ͬͯͳ͔ͬͨ͜ͱ͕Ͱ͖·ͨ͠ Χʔωϧαϛοτʹݺ͹ΕΔʢসʣ Φλϫʹߦ͘
44. Ͱ͖Δͱࢥ͍ͬͯͳ͔ͬͨ͜ͱ͕Ͱ͖·ͨ͠ Χʔωϧαϛοτʹݺ͹ΕΔʢসʣ Φλϫʹߦ͘ ੈքʹإΛചΔʢṖʣ
45. খ͞ͳۮવ͕ӡ໋Λม͑·ͨ͠ ্ా͞Μ͔ΒͷCELFͰͷߨԋґཔ͸ɺͨ·ͨ ·ࢁాຊ෦௕ͱಉ͡ిंʹ৐Γ߹Θͤͨͷ͕ ͖͔͚ͬ ΦλϫͷCFP͕ͨ·ͨ·ҰिؒԆظ͞Ε͍ͯͨ
46. Realities of Mainlining - Case of the TOMOYO Linux Project - Toshiharu Harada <haradats@nttdata.co.jp> <haradats@gmail.com> NTT DATA CORPORATION July 9, 2008
47. Dec. 8, 2006 ✴ Satoru Ueda of CELF (Consumer Electronics Linux Forum) asked me to demonstrate TOMOYO Linux at their technical meeting. ✴ http://tree.celinuxforum.org/CelfPubWiki/ JapanTechnicalJamboree12 ✴ I spoke to them, ✴ “please send requests/questions in Japanese” ✴ “please use TOMOYO Linux” ✴ And got ...
48. Feb. 8, 2007 ✴ Hiro Yoshioka of Miracle Linux gently asked me to introduce TOMOYO Linux to a pretty famous Japanese community, YLUG (Yokohama Linux Users Group) ✴ I accepted as usual not knowing what would happen ...
49. Feb. 8, 2007 ✴ Hiro Yoshioka of Miracle Linux gently asked me to introduce TOMOYO Linux to a pretty famous Japanese community, YLUG (Yokohama Linux Users Group) ✴ I accepted as usual not knowing what would happen ...
50. Feb. 8, 2007 ✴ Hiro Yoshioka of Miracle Linux gently asked me to introduce TOMOYO Linux to a pretty famous Japanese community, YLUG (Yokohama Linux Users Group) ✴ I accepted as usual not knowing what would happen ... Hiro Yoshioka (YLUG)
51. Feb. 8, 2007 ✴ Hiro Yoshioka of Miracle Linux gently asked me to introduce TOMOYO Linux to a pretty famous Japanese community, YLUG (Yokohama Linux Users Group) ✴ I accepted as usual not knowing what would happen ... Hiro Yoshioka (YLUG) Masahiro Itoh (BlueQuartz)
52. Feb. 8, 2007 ✴ Hiro Yoshioka of Miracle Linux gently asked me to introduce TOMOYO Linux to a pretty famous Japanese community, YLUG (Yokohama Linux Users Group) ✴ I accepted as usual not knowing what would happen ... Hiro Yoshioka (YLUG) Masahiro Itoh (BlueQuartz) Hideaki Yoshifuji (Usagi)
53. ϝΠϯϥΠϯʹೖͬͯ
54. ϝΠϯϥΠϯʹೖͬͯ ಛʹڻ͖͸ͳ͔ͬͨ
55. ϝΠϯϥΠϯʹೖͬͯ ಛʹڻ͖͸ͳ͔ͬͨ ʮ౤ߘͯ͠΋ବ໨ʯͳͷ͕౰ͨΓલʹͳ͍ͬͯͨ ͔Βɺ౤ߘ࡞ۀ͸׬શʹϧʔνϯͱԽ͍ͯͨ͠
56. ϝΠϯϥΠϯʹೖͬͯ ಛʹڻ͖͸ͳ͔ͬͨ ʮ౤ߘͯ͠΋ବ໨ʯͳͷ͕౰ͨΓલʹͳ͍ͬͯͨ ͔Βɺ౤ߘ࡞ۀ͸׬શʹϧʔνϯͱԽ͍ͯͨ͠ ҿΈʹ͍͘Θ͚Ͱ΋ͳ͘શһී௨ʹୀࣾʢসʣ
57. ϝΠϯϥΠϯ͸୭ͷ΋ͷʁ
58. ϝΠϯϥΠϯ͸୭ͷ΋ͷʁ Ξϙϩ̍̏߸ͷөըΛݟ·ͨ͠
59. ϝΠϯϥΠϯ͸୭ͷ΋ͷʁ Ξϙϩ̍̏߸ͷөըΛݟ·ͨ͠ ૢ࡞͍ͯͨ͠ͷ͸ΫϧʔͰ͋ͬͯ΋ɺΫϧʔ͚ͩ ͷྗͰ͸͋Γ·ͤΜ
60. ϝΠϯϥΠϯ͸୭ͷ΋ͷʁ Ξϙϩ̍̏߸ͷөըΛݟ·ͨ͠ ૢ࡞͍ͯͨ͠ͷ͸ΫϧʔͰ͋ͬͯ΋ɺΫϧʔ͚ͩ ͷྗͰ͸͋Γ·ͤΜ NASAͷελοϑͱɺύΠϩοτͷੜؐΛئ͏ ਓʑͷࢥ͍͕ح੻Λট͍ͨͷͰ͢
62. ϓϩδΣΫτϝϯόʔ΋ࣗ෼΋ৗʹͦͷͱ͖ྑ͍ ͱࢥ͏͜ͱΛ΍Γଓ͚͖ͯ·ͨ͠
63. ϓϩδΣΫτϝϯόʔ΋ࣗ෼΋ৗʹͦͷͱ͖ྑ͍ ͱࢥ͏͜ͱΛ΍Γଓ͚͖ͯ·ͨ͠ ͦΕ͕Ͱ͖ͨͷ͸ϓϩδΣΫτΛࢧ͑ͯ͘ΕΔਓ ͨͪͷଘࡏΛײ͡ΒΕ͔ͨΒͰ͢
64. ϓϩδΣΫτϝϯόʔ΋ࣗ෼΋ৗʹͦͷͱ͖ྑ͍ ͱࢥ͏͜ͱΛ΍Γଓ͚͖ͯ·ͨ͠ ͦΕ͕Ͱ͖ͨͷ͸ϓϩδΣΫτΛࢧ͑ͯ͘ΕΔਓ ͨͪͷଘࡏΛײ͡ΒΕ͔ͨΒͰ͢ ͔ͩΒɺϝΠϯϥΠϯ͸ΈΜͳͷ΋ͷͰ͢
65. ϓϩδΣΫτϝϯόʔ΋ࣗ෼΋ৗʹͦͷͱ͖ྑ͍ ͱࢥ͏͜ͱΛ΍Γଓ͚͖ͯ·ͨ͠ ͦΕ͕Ͱ͖ͨͷ͸ϓϩδΣΫτΛࢧ͑ͯ͘ΕΔਓ ͨͪͷଘࡏΛײ͡ΒΕ͔ͨΒͰ͢ ͔ͩΒɺϝΠϯϥΠϯ͸ΈΜͳͷ΋ͷͰ͢ ੋඇʮҰॹʹʯتΜͰཉ͍͠ͱࢥ͍·͢
67. ࢧ͑ΒΕ͍͔ͯͨΒ͜͜·Ͱଓ͚ͯ͜ΒΕ·ͨ͠
68. ࢧ͑ΒΕ͍͔ͯͨΒ͜͜·Ͱଓ͚ͯ͜ΒΕ·ͨ͠ ϖʔδϏϡʔʹɺμ΢ϯϩʔυ݅਺ʹɺϒϩά ͷॻ͖ࠐΈʹɺϝʔϦϯάϦετͷൃݴʹɺ ߨԋ΍σϞͷࢀՃऀʹ
69. ࢧ͑ΒΕ͍͔ͯͨΒ͜͜·Ͱଓ͚ͯ͜ΒΕ·ͨ͠ ϖʔδϏϡʔʹɺμ΢ϯϩʔυ݅਺ʹɺϒϩά ͷॻ͖ࠐΈʹɺϝʔϦϯάϦετͷൃݴʹɺ ߨԋ΍σϞͷࢀՃऀʹ ͍ͭ΋ײँ͍ͯ͠·ͨ͠
70. ࢧ͑ΒΕ͍͔ͯͨΒ͜͜·Ͱଓ͚ͯ͜ΒΕ·ͨ͠ ϖʔδϏϡʔʹɺμ΢ϯϩʔυ݅਺ʹɺϒϩά ͷॻ͖ࠐΈʹɺϝʔϦϯάϦετͷൃݴʹɺ ߨԋ΍σϞͷࢀՃऀʹ ͍ͭ΋ײँ͍ͯ͠·ͨ͠ ࠷ޙ͸΍ͬͺΓആ۟Ͱ
71. ʮ͓ΊͰͱ͏ ϝΠϯϥΠϯͯ Կͷ͜ͱʯ ϝΠϯϥΠϯԽ͕ࣹఔݍʹೖ͔ͬͯΒɺࣾ಺ͷؔ ܎ऀʹͦͷҙຯΛઆ໌͢Δͷ͸େมͰͨ͠ ͋ΒͨΊͯΦʔϓϯιʔεͷੈքͱاۀͷੈք ͷҧ͍Λ࣮ײ͠·ͨ͠ ʮࠓ·ͰɺͲΜ͚ͩ஌ΒΕͯͳ͔ͬͨΜͩΑʯ ͱ΋
72. ϝΠϯϥΠϯԽͷൿີ
73. ϝΠϯϥΠϯԽͷൿີ ϝΠϯϥΠϯԽ͸ͻͱͭͷୡ੒Ͱ͕͢ɺຊ౰͸ͦ ͷϓϩηεʹҙຯ͕͋Γ·͢
74. ϝΠϯϥΠϯԽͷൿີ ϝΠϯϥΠϯԽ͸ͻͱͭͷୡ੒Ͱ͕͢ɺຊ౰͸ͦ ͷϓϩηεʹҙຯ͕͋Γ·͢ ιʔείʔυ͸ॏཁͰ͕͢ɺͦΕ͚ͩͰ͸͋Γ· ͤΜ
75. ϝΠϯϥΠϯԽͷൿີ ϝΠϯϥΠϯԽ͸ͻͱͭͷୡ੒Ͱ͕͢ɺຊ౰͸ͦ ͷϓϩηεʹҙຯ͕͋Γ·͢ ιʔείʔυ͸ॏཁͰ͕͢ɺͦΕ͚ͩͰ͸͋Γ· ͤΜ ͦΕΛ࡞Δਓ͕ͨͪૉ੖Β͍͠ͷͰ͢
76. ϝΠϯϥΠϯԽͷൿີ ϝΠϯϥΠϯԽ͸ͻͱͭͷୡ੒Ͱ͕͢ɺຊ౰͸ͦ ͷϓϩηεʹҙຯ͕͋Γ·͢ ιʔείʔυ͸ॏཁͰ͕͢ɺͦΕ͚ͩͰ͸͋Γ· ͤΜ ͦΕΛ࡞Δਓ͕ͨͪૉ੖Β͍͠ͷͰ͢ ੋඇͦΕΛࣗΒମݧͯ͠Έ͍ͯͩ͘͞
77. ʮάϩʔόϧʯʹ͍ͭͯ TOMOYOͷϓϩδΣΫτ͸ɺʮάϩʔόϧʯͷத ʹ͍ͨ Χʔωϧ։ൃ΍ϝΠϯϥΠϯԽ͸άϩʔόϧ͕ લఏ άϩʔόϧͷҙຯΛཧղ͠ɺάϩʔόϧͳߟ͑ ํΛ਎ʹ͚ͭͨ
78. make the change ࠓ೔͔Β ͜ͷษڧձ͕͖͔͚ͬʹͳΕ͹
79. ʮؾ͕͚ͭ͹ɹଟ͘ͷਓʹɹࢧ͑ΒΕʯ ͋Γ͕ͱ͏͍͟͝·ͨ͠ ·͓ͨձ͍Ͱ͖Δ࣌Λָ͠Έʹ͍ͯ͠·͢