Upgrade to Pro — share decks privately, control downloads, hide ads and more …

container-seccomp

 container-seccomp

2022/03/09 OCHaCafe5 #3 Kubernetes のセキュリティ
コンテナセキュリティにおける権限制御
〜Seccompとかよくわからんけどとりあえずこれくらいはやっておこう〜

セッション動画
https://ochacafe.connpass.com/event/238355/

61748c5d26ae54a57b478f9c792bc2f7?s=128

mochizuki875

March 09, 2022
Tweet

More Decks by mochizuki875

Other Decks in Technology

Transcript

  1.  !NPDIJ[VLJ ίϯςφηΩϡϦςΟʹ͓͚Δݖݶ੍ޚ ʙ4FDDPNQͱ͔Α͘Θ͔ΒΜ͚ͲͱΓ͋͑ͣ͜Ε͘Β͍͸΍͓ͬͯ͜͏ʙ 0$)B$BGF,VCFSOFUFTͷηΩϡϦςΟ

  2. !NPDIJ[VLJ /BNF ɹ,FJUB.PDIJ[VLJʢNPDIJ[VLJʣ XIPBNJ

  3. /BNF ɹ,FJUB.PDIJ[VLJʢNPDIJ[VLJʣ XIPBNJ ͨ͵͖Ͱ͸ͳ͘ ͖ͭͶͰ͢ɻ !NPDIJ[VLJ

  4. ʹߦΘΕͨ$MPVE/BUJWF%BZTʹͯొஃ͠ɺ ίϯςφηΩϡϦςΟʹؔ͢Δ͓࿩Λͤͯ͞௖͖·ͨ͠ɻ ಈը IUUQTFWFOUDMPVEOBUJWFEBZTKQDOEUUBMLT ࢿྉ IUUQTTQFBLFSEFDLDPNNPDIJ[VLJDPOUBJOFSEFWTFDVSJUZ ݟͯͶʂ XIPBNJ

  5. ͸͡Ίʹ ίϯςφͷηΩϡϦςΟΛߟ͑Δ্Ͱ͸ͦͷ࢓૊Έ্ɺ ίϯςφʹର͢Δݖݶ੍ޚΛཧղ͢Δ͜ͱ͕ॏཁͰ͢ɻ ຊ೔͸ݖݶ੍ޚͷதͰ΋ಛʹ4FDDPNQʹΑΔίϯςφϓϩηε͔ΒͷγεςϜίʔϧͷ ࣮ߦ੍ޚʹείʔϓΛ౰ͯɺͦͷجૅతͳ෦෼ʹؔ͢Δ͓࿩Λͤͯ͞௖͖·͢ɻ

  6. ɾຊൃද͸αΠόʔ߈ܸΛߠఆ͢Δ΋ͷͰ͸͋Γ·ͤΜ ɾൃද಺Ͱ༻͍Δίϯςφͱ͍͏ݴ༿͸جຊతʹSVODͰ࣮ߦ͞ΕΔίϯςφΛࢦ͠·͢ ɾܝࡌ಺༰͸ݸਓͷݟղͰ͋Γɺॴଐ͢Δاۀ΍૊৫ͷཱ৔ɺઓུɺҙݟΛ୅ද͢Δ΋ͷͰ͸͋Γ·ͤΜ ɾهࡌ͞Ε͍ͯΔձ໊ࣾɺ঎඼໊ɺ·ͨ͸αʔϏε໊͸ɺ֤ࣾͷ঎ඪొ࿥·ͨ͸঎ඪͰ͢ ͸͡Ίʹ

  7. "HFOEB ίϯςφͷִ཭ ίϯςφʹ͓͚Δݖݶ੍ޚ γεςϜίʔϧͱ4FDDPNQ ,VCFSOFUFTʹ͓͚Δ4FDDPNQ ·ͱΊ

  8. ίϯςφͷִ཭ ίϯςφͷ࣮ଶ͸Χʔωϧ্Ͱ࣮ߦ͞ΕΔϓϩηεͰ͢ɻ 04 ,FSOFM 1SPDFTT 1SPDFTT 1SPDFTT

  9. ίϯςφͷִ཭ 04 ,FSOFM ίϯςφͷ࣮ଶ͸Χʔωϧ্Ͱ࣮ߦ͞ΕΔϓϩηεͰ͢ɻ ίϯςφʹ͋ͨΔϓϩηε͕Χʔωϧͷ༷࣋ͭʑͳػೳʹΑΓִ཭͞ΕΔ͜ͱͰɺίϯςφͱͯ͠ͷػೳ͕࣮ݱ͞Ε·͢ɻ 1SPDFTT SPPUGT 1SPDFTT SPPUGT 1SPDFTT

    SPPUGT ࣮ߦۭؒʢFY/BNFTQBDFɺQJWPU@SPPUʣ ɹϓϩηε͕ಈ࡞͢Δ؀ڥΛִ཭͔͋ͨ͠΋୯ମͰಈ͍͍ͯΔΑ͏ʹݟ͔͚ͤΔ Ϧιʔε࢖༻ྔʢFY$HSPVQʣ ɹϓϩηε͕࢖༻Ͱ͖ΔϦιʔεྔʢ$16 .FNPSZͳͲʣΛ੍ݶ͢Δ ݖݶʢޙड़ʣ ɹϓϩηεͷΧʔωϧʹର͢Δૢ࡞Λ੍ݶ͢Δ ίϯςφ
  10. ίϯςφʹ͓͚Δݖݶ੍ޚ ࣮ߦۭؒͷִ཭΍Ϧιʔε࢖༻ྔͷ੍ݶ͚ͩͰ͸ίϯςφϓϩηε͸04ʹର࣮ͯ͠ߦϢʔβʔ૬౰ͷݖݶΛ࣋ͭ͜ͱʹͳΓ·͢ɻ ˞ྫ͑͹ίϯςφΛಛʹҙࣝͤͣʹ࣮ߦͨ͠৔߹ɺίϯςφϓϩηε͸σϑΥϧτͷ࣮ߦϢʔβʔͰ͋ΔSPPUݖݶΛ࣋ͭ͜ͱʹͳΔ ίϯςφϓϩηε͕ա৒ͳݖݶΛ͍࣋ͬͯΔͱɺྫ͑͹ίϯςφͷִ཭؀ڥ͔Β֎෦ʹӨڹΛٴ΅͢ͱ͍ͬͨ ηΩϡϦςΟϦεΫʹܨ͕Γ·͢ɻʢFY$POUBJOFS#SFBL0VUʣ 04 ,FSOFM 1SPDFTT SPPUGT 1SPDFTT

    1SPDFTT SPPU VTFS SPPU 04ʹରͯ͠ ಛݖϢʔβʔ૬౰ͷ ͢΂ͷૢ࡞͕Մೳ 04ʹରͯ͠ ҰൠϢʔβʔ૬౰ͷ ૢ࡞͕Մೳ ʢຊ೔͸ѻΘͳ͍͚Ͳॏཁͳʣิ଍ ࣮ࡍͷͱ͜ΖίϯςφͰ͸ա౓ͳݖݶ͕ϓϩηεʹ෇༩͞ΕΔ͜ͱͷͳ͍Α͏ɺޙड़ͷ௨Γ༷ʑͳ࢓૊ΈΛ༻͍Δ͜ͱͰݖݶ੍ޚΛߦ͍ͬͯ·͢ɻ ͱ͸ݴ͑ίϯςφϓϩηε͕SPPUݖݶͰ࣮ߦ͞ΕΔ͜ͱ͸ҰൠతʹϦεΫͱΈͳ͞Ε͓ͯΓɺίϯςφ࣮ߦ࣌͸໌֬ʹඇಛݖϢʔβʔΛࢦఆ͢Δ͜ͱ͕ ϕετϓϥΫςΟεͱ͞Ε͍ͯ·͢ɻ 04ʹରͯ͠ ಛݖϢʔβʔ૬౰ͷ ͢΂ͷૢ࡞͕Մೳ ίϯςφʢݖݶ੍ޚͳ͠ʣ
  11. ίϯςφʹ͓͚Δݖݶ੍ޚ ͦ͜ͰίϯςφͰ͸-JOVYΧʔωϧͷ࣋ͭҎԼͷΑ͏ͳػೳΛ༻͍Δ͜ͱͰɺίϯςφϓϩηε͔ΒΧʔωϧʹର͢Δૢ࡞Λ੍ݶ ͢Δ࢓૊ΈΛ࠾༻͍ͯ͠·͢ɻ 3FBE0OMZ.PVOU $BQBCJMJUZ -4. "QQ"SNPS4&-JOVY 4FDDPNQ ػೳ ֓ཁ

    ಛఆͷϑΝΠϧγεςϜΛ3FBE0OMZͱ͠ ͯϚ΢ϯτ͢Δ࢓૊Έɻ SPPUϢʔβʔͷ࣋ͭݖݶʢಛݖʣΛࡉ෼ Խ͠ɺඞཁͳݖݶͷΈΛϓϩηεʹ෇༩ ͢Δ࢓૊Έɻ ϓϩηε͔ΒͷϑΝΠϧΞΫηεΛ੍ݶ͢Δ ࢓૊Έɻ ڧ੍ΞΫηε੍ޚͱݺ͹ΕDIPXO΍DINPE ʢ೚ҙΞΫηε੍ޚʣͷΑ͏ʹద༻͞Ε੍ͨ ݶΛมߋͰ͖ͳ͍ɻ ϓϩηε͔ΒΧʔωϧʹରͯ͠ൃߦͰ͖ ΔγεςϜίʔϧΛ੍ݶ͢Δ࢓૊Έɻ LTʹ͓͚Δ ద༻ঢ়گ 1PEσϓϩΠ࣌ʹಛఆͷϑΝΠϧγεςϜ ΛσϑΥϧτͰ30ͱͯ͠Ϛ΢ϯτ͢Δɻ ʢQSPD TZTGT DHSPVQʣ ˞EFWͳͲϗετͱϑΝΠϧγεςϜΛ ෼͚ͯӅṭ͢Δέʔε΋͋Δ 1PEσϓϩΠ࣌ʹίϯςφϓϩηεʹର ͯ͠σϑΥϧτͰ࠷௿ݶඞཁͳݖݶͷΈ Λ෇༩͢Δ 1PEσϓϩΠ࣌ʹσϑΥϧτͰ੍ޚ͕ద༻͞ ΕΔɻ ˞$3*΍ίϯςφϗετͷઃఆ࣍ୈͰ͸͋Δ ͕ɺ௨ৗ$3*σϑΥϧτͷ಺༰͕ద༻͞ΕΔ 1PEσϓϩΠ࣌ʹ೚ҙͷઃఆΛ౉͢͜ͱ Ͱద༻Մೳɻ σϑΥϧτͰ͸੍ޚ͕ద༻͞Εͳ͍ɻ $PO fi HVSFB4FDVSJUZ$POUFYUGPSB1PEPS$POUBJOFS IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSTFDVSJUZDPOUFYU ˞ҼΈʹ%PDLFS΍1PENBOͰίϯςφΛσϓϩΠ͢Δ৔߹͸σϑΥϧτͰ4FDDPNQ͕ద༻͞Ε·͢ ɹIUUQTEPDTEPDLFSDPNFOHJOFTFDVSJUZTFDDPNQ ɹIUUQTEPDTQPENBOJPFOMBUFTUNBSLEPXOQPENBOSVOIUNM IJHIMJHIUTFDDPNQTFDDPNQQPMJDZQPMJDZ
  12. γεςϜίʔϧͱ4FDDPNQ 🤔 ͦ΋ͦ΋4FDDPNQͬͯԿʁʁ σϑΥϧτͰద༻͞Εͳ͍ͷʹඞཁʁʁ

  13. γεςϜίʔϧ ϓϩηε͕ಈ࡞͢Δ্ͰଞͷϓϩηεΛૢ࡞ͨ͠ΓϦιʔεʹΞΫηε͢Δࡍ͸ɺ γεςϜίʔϧͱݺ͹ΕΔ໋ྩΛΧʔωϧʹରͯ͠ൃߦ͢Δ͜ͱͰͦͷૢ࡞Λ࣮ݱ͠·͢ɻ γεςϜίʔϧͱ4FDDPNQ VCVOUVVTFS!VCVOUVTFSWFSdTUSBDFDBUUFTUUYU FYFDWF VTSCJODBU <DBU UFTUUYU> Y

    ff FFF WBST   CSL /6-- YFC BSDI@QSDUM Y "3$)@   Y ff FCBDG &*/7"- *OWBMJEBSHVNFOU  BDDFTT FUDMETPQSFMPBE 3@0, &/0&/5 /PTVDI fi MFPSEJSFDUPSZ  PQFOBU "5@'%$8% FUDMETPDBDIF 0@3%0/-:c0@$-0&9&$  GTUBU  \TU@NPEF4@*'3&(c TU@TJ[F ^  NNBQ /6--  1305@3&"% ."1@13*7"5&   YGBFD ɾɾɾ SFBE  IFMMPaO   XSJUF  IFMMPaO IFMMP  SFBE     NVONBQ YGB   DMPTF   DMPTF   DMPTF   FYJU@HSPVQ    FYJUFEXJUI ʢྫʣDBUϓϩάϥϜͷ࣮ߦ͢ΔγεςϜίʔϧΛTUSBDFͰදࣔ γεςϜίʔϧͷྫ ɹFYFDWF ɿϓϩάϥϜͷ࣮ߦ ɹPQFOBU ɿϑΝΠϧͷΦʔϓϯ ɹDMPTF ɿϑΝΠϧσΟεΫϦϓλʔͷΫϩʔζ ɹNNBQ ɿϝϞϦͷ֬อ ɹNVONBQ ɿϝϞϦͷղ์ ɹSFBE ɿϑΝΠϧσΟεΫϦϓλʔ͔ΒͷಡΈࠐΈ ɹXSJUF ɿϑΝΠϧσΟεΫϦϓλʔ΁ͷॻ͖ࠐΈ 1SPDFTT 04 ,FSOFM 4:4$"-- 1SPDFTT 4:4$"--
  14. 4FDDPNQʢ4&$VS$0.1VUJOHʣ ϓϩηε͕࣮ߦՄೳͳγεςϜίʔϧΛ੍ݶ͢Δ͜ͱͰɺϓϩηεͷෆਖ਼ૢ࡞΍ҙਤͤ͵ڍಈʹର͢ΔηΩϡϦςΟ֬อΛ ࣮ݱ͢Δػೳɻ γεςϜίʔϧͱ4FDDPNQ 1SPDFTT 04 ,FSOFM TFDDPNQ 4:4$"-- 1SPDFTT

    TFDDPNQ VCVOUVVTFS!VCVOUVTFSWFSdDBUTFDDPNQ "QQMZTFDDPNQUPEFOZPQFOBU   FYFDDBUUFTUUYU PQFOBU  EFOZFSS ʢྫʣϓϩάϥϜ͔ΒPQFOBU Λېࢭͨ͠ঢ়ଶͰDBUΛ࣮ߦ ɾɾɾ FYFDWF CJOTI <TI D DBUUFTUUYU> Y ff DCCECF WBST   CSL /6-- YCBCC BSDI@QSDUM Y "3$)@   Y ff DDF &*/7"- *OWBMJEBSHVNFOU  BDDFTT FUDMETPQSFMPBE 3@0, &/0&/5 /PTVDI fi MFPSEJSFDUPSZ  PQFOBU "5@'%$8% FUDMETPDBDIF 0@3%0/-:c0@$-0&9&$   LJMMFECZ4*(4:4 DPSFEVNQFE  DBUΛ࣮ߦ͍ͯ͠ΔՕॴͷTUSBDF݁Ռ 4:4$"-- ڐՄ͞ΕͨTZTDBMM͸ ௨ৗ௨Γ࣮ߦ ېࢭ͞ΕͨTZTDBMM͸ ࣮ߦ͠ͳ͍ TFDDPNQʹΑΓPQFOBU ͕ڋ൱͞Εͨ ୈճίϯςφٕज़ͷ৘ใަ׵ձ!ΦϯϥΠϯʙTFDDPNQʙ IUUQTXXXZPVUVCFDPNXBUDI W((@$0PLCEX
  15. DBUTFDDPNQD γεςϜίʔϧͱ4FDDPNQ JODMVEFTUEJPI JODMVEFVOJTUEI JODMVEFTZTUZQFTI JODMVEFTUEMJCI JODMVEFFSSOPI JODMVEFTUEEFGI JODMVEFMJOVYBVEJUI JODMVEFMJOVY

    fi MUFSI JODMVEFMJOVYTFDDPNQI JODMVEFTZTQSDUMI JODMVEFTZTTZTDBMMI JGOEFGTFDDPNQ JOUTFDDPNQ VOTJHOFEJOUPQ VOTJHOFEJOU fl BHT WPJE BSHT  \ FSSOP SFUVSOTZTDBMM @@/3@TFDDPNQ PQ  fl BHT BSHT  ^ FOEJG #1'ͰTFDDPNQϧʔϧΛఆٛʢTZTDBMMͷڐՄېࢭΛఆٛʣ TUSVDUTPDL@ fi MUFS fi MUFS<>\ #1'@45.5 #1'@-%c#1'@8c#1'@"#4  P ff TFUPG TUSVDUTFDDPNQ@EBUB BSDI  #1'@+6.1 #1'@+.1c#1'@+&2c#1'@, "6%*5@"3$)@9@    #1'@45.5 #1'@-%c#1'@8c#1'@"#4  P ff TFUPG TUSVDUTFDDPNQ@EBUB OS  #1'@+6.1 #1'@+.1c#1'@+&2c#1'@, @@/3@PQFOBU   ϑΟϧλʔ͢ΔTZTDBMMʹPQFOBU  Λࢦఆ #1'@45.5 #1'@3&5c#1'@, 4&$$0.1@3&5@,*--  #1'@45.5 #1'@3&5c#1'@, 4&$$0.1@3&5@"--08  ^ TUSVDUTPDL@GQSPHQSPH\ MFO VOTJHOFETIPSU  TJ[FPG fi MUFS TJ[FPG fi MUFS<>   fi MUFS fi MUFS  ^ JOUNBJO WPJE \ JOUFSS JG QSDUM 13@4&5@/0@/&8@13*74     \ QFSSPS QSDUM  FYJU &9*5@'"*-63&  ^ TFDDPNQద༻ PQFOBU  Λېࢭ͢ΔϑΟϧλʔΛઃఆ  QSJOUG TaO "QQMZTFDDPNQUPEFOZPQFOBU    JG TFDDPNQ 4&$$0.1@4&5@.0%&@'*-5&3  QSPH \ QFSSPS TFDDPNQ  ^ TFDDPNQద༻ޙʹDBUΛ࣮ߦ QSJOUG TaO FYFDDBUUFTUUYU  JG FSSTZTUFN DBUUFTUUYU \ QSJOUG PQFOBU  EFOZFSSEaO FSS  SFUVSO ^ SFUVSO ^ ʢࢀߟʣPQFOBU Λېࢭͨ͠ঢ়ଶͰDBUΛ࣮ߦ͢ΔϓϩάϥϜ
  16. ,VCFSOFUFTʹ͓͚Δ4FDDPNQ ,VCFSOFUFTͰ͸ίϯςφϓϩηεʹରͯ͠ڐՄېࢭ͢ΔγεςϜίʔϧΛ4FDDPNQϓϩϑΝΠϧͱͯ͠ఆٛͰ͖·͢ɻ ίϯςφʢ1PEʣΛσϓϩΠ͢Δࡍʹಛఆͷ4FDDPNQϓϩϑΝΠϧΛࢦఆ͢Δ͜ͱͰ ίϯςφϓϩηεʹର͢ΔγεςϜίʔϧͷ੍ݶ͕ՄೳͰ͢ɻ 1PEʹ4FDDPNQΛద༻͢Δ͜ͱ͸,VCFSOFUFTެࣜͷϓϥΫςΟεͰ΋ਪ঑͞ΕΔࣄ߲ͱͳ͍ͬͯ·͢ɻ 04 ,FSOFM 1SPDFTT 1SPDFTT 1SPDFTT

    TFDDPNQ QSP fi MF" TFDDPNQ QSP fi MF# TFDDPNQ TFDDPNQ QSP fi MF"Ͱ ڐՄ͞ΕͨTZTDBMMͷΈ શͯͷTZTDBMM QSP fi MF#Ͱ ڐՄ͞ΕͨTZTDBMMͷΈ $BQBCJMJUZͳͲଞͷݖݶ੍ޚͰ੍ݶ͞Εͨ΋ͷ͸আ͘ ɾ1PEʹର͢Δ4FDDPNQͷద༻͸,VCFSOFUFTWʹ͓͍ͯTUBCMFͱͳͬͨൺֱత৽͍͠ػೳ ɾ,VCFSOFUFTWݱࡏͰ͸1PEσϓϩΠ࣌ʹ໌ࣔ͠ͳ͍ݶΓద༻͞Εͳ͍ ɾ4FDDPNQͱ͸ผʹ$BQBCJMJUZͰ΋ίϯςφϓϩηεʹର͢Δݖݶ੍ޚ͕͞Ε͍ͯΔ 1PE4FDVSJUZ4UBOEFSE IUUQTLVCFSOFUFTJPEPDTDPODFQUTTFDVSJUZQPETFDVSJUZTUBOEBSET
  17. ,VCFSOFUFTʹ͓͚Δ4FDDPNQ 4FDDPNQ͕ޮՌΛൃشͨ͠ྫʢ-JOVYΧʔωϧͷ੬ऑੑɿ$7&ʣ ೥݄ʹ-JOVYΧʔωϧʹ੬ऑੑ͕ൃݟ͞Εͨɻ '*MFTZTUFN$POUFYUγεςϜ GTGT@DPOUFYUD ಺ͷؔ਺Λѱ༻ͯ͠όοϑΝΦʔόʔϑϩʔΛҾ͖ى͜͢͜ͱͰɺ %P4߈ܸ΍$POUBJOFS#SFBLPVUʹܨ͛Δ͜ͱ͕Ͱ͖Δɻ ͜ͷ߈ܸʹ͸ɺ௨ৗ1PEىಈ࣌ʹίϯςφϓϩηε͔Βണୣ͞ΕΔ$"1@4:4@"%.*/ͱ͍͏ݖݶʢ$BQBCJMJUZʣ͕ඞཁʹͳΔ͕ɺ ίϯςφ಺ͰVOTIBSFͱݺ͹ΕΔγεςϜίʔϧΛ࣮ߦ͢Δ͜ͱͰ͜ͷݖݶΛऔಘͰ͖ͯ͠·͏ɻ VOTIBSFΛېࢭ͢Δ4FDDPNQΛద༻͍ͯ͠Ε͹ɺ͜ͷϦεΫ͸๷͙͜ͱ͕Ͱ͖ͨͱݴ͑·͢ɻ

    ˞ຊ੬ऑੑ͸طʹमਖ਼ࡁΈͰ͢ɻ 04 ,FSOFM 1SPDFTT 1SPDFTT $"1@4:4@"%.*/ VOTIBSFSCJOCBTI "55"$,ʂʂ 1SPDFTT TFDDPNQ QSP fi MF TFDDPNQ VOTIBSFSCJOCBTI
  18. ,VCFSOFUFTʹ͓͚Δ4FDDPNQ $7& IUUQTDWFNJUSFPSHDHJCJODWFOBNFDHJ OBNF$7& $7&JO-JOVY,FSOFM$BO"MMPX$POUBJOFS&TDBQFJO,VCFSOFUFT IUUQTCMPHBRVBTFDDPNDWFMJOVYLFSOFMDPOUBJOFSFTDBQFJOLVCFSOFUFT $SVTBEFSTPG3VTU$7& IUUQTHJUIVCDPN$SVTBEFSTPG3VTU$7&

  19. ,VCFSOFUFTʹ͓͚Δ4FDDPNQ 1PE΁ͷ4FDDPNQద༻ํ๏͸ҎԼͷύλʔϯͰ͢ɻ ᶃ$3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻ ᶄಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ 3FTUSJDUB$POUBJOFST4ZTDBMMTXJUITFDDPNQ IUUQTLVCFSOFUFTJPEPDTUVUPSJBMTTFDVSJUZTFDDPNQ

  20. ,VCFSOFUFTʹ͓͚Δ4FDDPNQᶃ$3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻ $3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻ ɹDPOUBJOFSE΍DSJP͸$3*ϥϯλΠϜͱͯ͠σϑΥϧτͷ4FDDPNQQSP fi MFΛ͍࣋ͬͯ·͢ɻ ɹ͜ΕΛ1PEσϓϩΠ࣌ʹద༻͢Δ͜ͱͰɺίϯςφϓϩηε͔Β࣮ߦՄೳͳγεςϜίʔϧ੍͕ݶ͞ΕΔΑ͏ʹͳΓ·͢ɻ ɹಛผཁ͕݅ͳ͍ݶΓ͸ͪ͜ΒΛద༻͓ͯ͘͜͠ͱͰϥϯλΠϜͷఆٛ͢Δ࠷௿ݶͷηΩϡϦςΟ͸֬อͰ͖Δ͜ͱʹͳΓ·͢ɻ BQJ7FSTJPOW LJOE1PE NFUBEBUB

    MBCFMT SVOTFDDPNQQPE OBNFTFDDPNQQPE TQFD TFDVSJUZ$POUFYU TFDDPNQ1SP fi MF UZQF3VOUJNF%FGBVMU DPOUBJOFST JNBHFVCVOUV OBNFVCVOUV DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF> TFDDPNQQPEZNM <$3*ϥϯλΠϜσϑΥϧτͷ4FDDPNQϓϩϑΝΠϧ> DPOUBJOFSE IUUQTHJUIVCDPNDPOUBJOFSEDPOUBJOFSECMPCBFGDDGBBBDEEDPOUSJCTFDDPNQ TFDDPNQ@EFGBVMUHP- DSJP IUUQTHJUIVCDPNDSJPDSJPCMPCGFEWFOEPSHJUIVCDPNDPOUBJOFSTDPNNPOQLHTFDDPNQEFGBVMU@MJOVYHP- $3*ϥϯλΠϜσϑΥϧτͷ TFDDPNQϓϩϑΝΠϧΛద༻ $SFBUF1PEUIBUVTFTUIFDPOUBJOFSSVOUJNFEFGBVMUTFDDPNQQSP fi MF IUUQTLVCFSOFUFTJPEPDTUVUPSJBMTTFDVSJUZTFDDPNQDSFBUFQPEUIBUVTFTUIFDPOUBJOFSSVOUJNFEFGBVMUTFDDPNQQSP fi MF
  21. ,VCFSOFUFTʹ͓͚Δ4FDDPNQᶃ$3*ϥϯλΠϜσϑΥϧτϓϩϑΝΠϧΛద༻ ʢࢀߟʣ,VCFSOFUFTʹ͓͚Δ4FDDPNQͷσϑΥϧτద༻ ɹݱࡏ,&1ʹͯ1PEσϓϩΠ࣌ʹσϑΥϧτͰ$3*ϥϯλΠϜσϑΥϧτͷ4FDDPNQϓϩϑΝΠϧΛద༻͢Δ͜ͱ͕ ɹݕ౼͞Ε͍ͯ·͢ɻ ɹ˞,VCFSOFUFTWʹ͓͍ͯຊػೳ͸BMQIBػೳͱͯ͠ϦϦʔε͞Ε͓ͯΓɺLVCFMFUͷGFBUVSFHBUFΛ༗ޮʹ͢Δ͜ͱͰར༻Մೳ ɹ,&1&OBCMFTFDDPNQCZEFGBVMU ɹIUUQTHJUIVCDPNLVCFSOFUFTFOIBODFNFOUTUSFFBDDLFQTTJHOPEFTFDDPNQCZEFGBVMUVQHSBEFEPXOHSBEFTUSBUFHZ ɹ&OBCMFUIFVTFPG3VOUJNF%FGBVMUBTUIFEFGBVMUTFDDPNQQSP fi MFGPSBMMXPSLMPBET

    ɹIUUQTLVCFSOFUFTJPEPDTUVUPSJBMTTFDVSJUZTFDDPNQFOBCMFUIFVTFPGSVOUJNFEFGBVMUBTUIFEFGBVMUTFDDPNQQSP fi MFGPSBMMXPSLMPBET ɹ&OBCMFTFDDPNQGPSBMMXPSLMPBETXJUIBOFXWBMQIBGFBUVSF ɹIUUQTLVCFSOFUFTJPCMPHTFDDPNQEFGBVMU
  22. ,VCFSOFUFTʹ͓͚Δ4FDDPNQᶄಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ ಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ ɹ$3*σϑΥϧτΑΓ΋ηΩϡϦςΟΛߴΊ͍ͨɺಠࣗͷϫʔΫϩʔυʹରԠ͍ͤͨ͞ͱ͍͏৔߹͸ ɹڐՄېࢭ͢ΔγεςϜίʔϧΛهࡌͨ͠4FDDPNQϓϩϑΝΠϧΛίϯςφϗετʹ഑ஔ͠1PEσϓϩΠ࣌ʹద༻͢Δ͜ͱͰɺ ɹίϯςφϓϩηεʹಠࣗͷ4FDDPNQ͕ద༻͞Εҙਤͨ͠γεςϜίʔϧͷ࣮ߦͷΈ͕ڐՄ͞ΕΔΑ͏ʹͳΓ·͢ɻ BQJ7FSTJPOW LJOE1PE NFUBEBUB MBCFMT SVOTFDDPNQQPE

    OBNFTFDDPNQQPE TQFD TFDVSJUZ$POUFYU TFDDPNQ1SP fi MF UZQF-PDBMIPTU MPDBMIPTU1SP fi MFQSP fi MFTTBNQMFTFDDPNQKTPO DPOUBJOFST JNBHFVCVOUV OBNFVCVOUV DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF> TFDDPNQQPEZNM \ EFGBVMU"DUJPO4$.1@"$5@&33/0  BSDIJUFDUVSFT< 4$.1@"3$)@9@  4$.1@"3$)@9  4$.1@"3$)@9 >  TZTDBMMT< \ OBNFT< NNBQ  SFBE  XSJUF  DMPTF  ɾɾɾ >  BDUJPO4$.1@"$5@"--08 ^ > ^ TBNQMFTFDDPNQKTPO ಠࣗͷTFDDPNQϓϩϑΝΠϧΛద༻ ڐՄ͢ΔTZTDBMMΛఆٛ ˞4FDDPNQϓϩϑΝΠϧΛ֤/PEFͷWBSMJCLVCFMFUTFDDPNQQSP fi MFTʹ഑ஔ͢Δ
  23. ,VCFSOFUFTʹ͓͚Δ4FDDPNQᶄಠࣗͷ4FDDPNQϓϩϑΝΠϧΛద༻ ʢࢀߟʣTFDVSJUZQSP fi MFTPQFSBUPS ɹ,VCFSOFUFTʹ͓͍ͯಠࣗͷ4FDDPNQϓϩϑΝΠϧΛѻ͏ͷ͸ҎԼͷ؍఺͔Β݁ߏେมͰ͢ɻ ɹɹɾඞཁͳγεςϜίʔϧͷચ͍ग़͠ ɹɹɾ4FDDPNQϓϩϑΝΠϧͷ࡞੒ ɹɹɾ֤ίϯςφϗετ΁ͷ4FDDPNQϓϩϑΝΠϧ഑ஔ ɹͦ͜Ͱ4FDDPNQϓϩϑΝΠϧͷࣗಈੜ੒΍$3ԽʹΑΓ,VCFSOFUFT্Ͱͷ4FDDPNQͷѻ͍ΛϥΫʹͯ͘͠ΕΔ ɹTFDVSJUZQSP

    fi MFTPQFSBUPSͱ͍͏0QFSBUPS͕։ൃ͞Ε͍ͯ·͢ɻ ɹLVCFSOFUFTTJHTTFDVSJUZQSP fi MFTPQFSBUPS ɹIUUQTHJUIVCDPNLVCFSOFUFTTJHTTFDVSJUZQSP fi MFTPQFSBUPS ɹ4FDVSFZPVS,VCFSOFUFTEFQMPZNFOUTXJUIF#1' ɹIUUQTEFWFMPQFSTSFEIBUDPNBSUJDMFTTFDVSFZPVSLVCFSOFUFTEFQMPZNFOUTFCQG ɹTFDVSJUZQSP fi MFTPQFSBUPSΛ͞ΘͬͯΈͨ ɹIUUQTTQFBLFSEFDLDPNPLFQZUSZTFDVSJUZQSP fi MFTPQFSBUPS
  24. ·ͱΊ ίϯςφʹ͓͚Δݖݶ੍ޚ ɹɾίϯςφͰ͸ϓϩηεִ཭ͷҰ؀ͱͯ͠ݖݶ੍ޚΛߦ͍ͬͯΔ 4FDDPNQʹ͍ͭͯͷ֓ཁ ɹɾ4FDDPNQͱ͸Χʔωϧʹର͢ΔγεςϜίʔϧΛ੍ݶ͢Δ࢓૊Έ ,VCFSOFUFTʹ͓͚Δ4FDDPNQద༻ํ๏ͱҙٛ ɹɾ4FDDPNQͱ͔Α͘Θ͔ΒΜ͚ͲͱΓ͋͑ͣ͜Ε͘Β͍͸΍͓ͬͯ͜͏

  25. ·ͱΊ ίϯςφʹ͓͚Δݖݶ੍ޚ ɹɾίϯςφͰ͸ϓϩηεִ཭ͷҰ؀ͱͯ͠ݖݶ੍ޚΛߦ͍ͬͯΔ 4FDDPNQʹ͍ͭͯͷ֓ཁ ɹɾ4FDDPNQͱ͸Χʔωϧʹର͢ΔγεςϜίʔϧΛ੍ݶ͢Δ࢓૊Έ ,VCFSOFUFTʹ͓͚Δ4FDDPNQద༻ํ๏ͱҙٛ ɹɾ4FDDPNQͱ͔Α͘Θ͔ΒΜ͚ͲͱΓ͋͑ͣ͜Ε͘Β͍͸΍͓ͬͯ͜͏ ɹɹˠಛʹཧ༝͕ͳ͚Ε͹3VOUJNF%FGBVMUΛద༻ͯ͠ෆཁͳγεςϜίʔϧ͕ൃߦ͞ΕΔηΩϡϦςΟϦεΫΛͳͦ͘͏

  26. $POUBJOFS4FDVSJUZ#PPL IUUQTDPOUBJOFSTFDVSJUZEFWTFDVSJUZCSFBLPVUUPIPTUIUNM %PDLFS,VCFSOFUFT։ൃɾӡ༻ͷͨΊͷηΩϡϦςΟ࣮ફΨΠυ IUUQTCPPLNZOBWJKQFDQSPEVDUTEFUBJMJE ίϯςφٕज़ೖ໳Ծ૝Խͱͷҧ͍Λ஌Γɺཁૉٕज़Λ৮ֶͬͯ΅͏ IUUQTFIDBSFFSDPNFOHJOFFSIVCFOUSZ ࢀߟ

  27. ຖि༵ۚdʹ,VCFSOFUFT$MPVE/BUJWFؔ࿈ͷ࿩୊Λ:PV5VCFੜ഑৴ʹͯࡶஊܗࣜͰ഑৴͍ͯ͠·͢ɻ ͓͕࣌ؒ͋Ε͹ੋඇ͝ࢹௌ͍ͩ͘͞ʂʢήετͰͷ͝ࢀՃ΋͓଴͍ͪͯ͠·͢ʣ એ఻ IUUQTLVCFOFXTDPOOQBTTDPN !NPDIJ[VLJ !BOUJCFSJBM !CFMMT@ !JU@@DIBHP !63ZP@

  28. 5IBOL:PV