suEXEC セキュリティモデルをベースにしたコンテナ起動時のバリデーションの提案 / A suEXEC-based validation in containers' startup

wsa研第二回発表資料
予稿: https://github.com/udzura/wsa-sg-2nd-draft/tree/master/draft#suexec-%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E3%83%A2%E3%83%87%E3%83%AB%E3%82%92%E3%83%99%E3%83%BC%E3%82%B9%E3%81%AB%E3%81%97%E3%81%9F%E3%82%B3%E3%83%B3%E3%83%86%E3%83%8A%E8%B5%B7%E5%8B%95%E6%99%82%E3%81%AE%E3%83%90%E3%83%AA%E3%83%87%E3%83%BC%E3%82%B7%E3%83%A7%E3%83%B3%E3%81%AE%E6%8F%90%E6%A1%88

26枚目について、発表時から指摘を受け修正しています

Transcript

1. 6DIJP
   ,POEP
   
   (.0
   1FQBCP
   *OD
   
   84"ݚڀձ
    TV&9&$
   ηΩϡϦςΟϞσϧΛ
   ϕʔεʹͨ͠ίϯςφىಈ࣌ͷ
   όϦσʔγϣϯͷఏҊ
2. ΤϯδχΞ ۙ౻Ӊஐ࿕
   !VE[VSB ٕज़෦
   ٕज़ج൫νʔϜ
3. ໨࣍  લఏ 
   ίϯςφ؀ڥఏڙͷࡍͷηΩϡϦςΟత՝୊
    લఏ 
   ίϯςφʹ·ͭΘΔηΩϡϦςΟػߏͷ੔ཧ
    ఏҊ͢ΔόϦσʔγϣϯػߏʹ͍ͭͯ
    ՝୊ɾٞ࿦͍ͨ͜͠ͱ
4. ίϯςφ؀ڥఏڙͷࡍͷ
   ηΩϡϦςΟత՝୊
5. 8FCαʔϏεఏڙͰͷίϯςφͷར༻ w ಥൃతΞΫηε૿ͳͲ΁ͷରॲͷͨΊɺ8FCαʔϏεͷӡ༻ऀ͸ߴ଎͔ͭॊೈͳϦιʔ ε੍ޚΛ͍ͨ͠ɻ
   w ٸͳϦιʔε௥Ճ΁ͷରԠɺෆཁͳ࣌͸ݮΒ͢ɺͳͲɻ
   w ίϯςφ͸ͦͷىಈͷߴ଎͞ͳͲͷੑ࣭͔Βɺͦͷ໨తʹ͓͋ͬͯΓීٴ͕ਐΈͭͭ ͋Δɻ
   w )BDPOJXB
   ࿦จ
   Ͱ΋͜ͷલఏʹ͍ͭͯड़΂͍ͯΔ
   w ࠓճ͸ͦͷதͰ΋ɺϗεςΟϯά؀ڥʹ͓͍ͯߴ଎͔ͭॊೈͳϦιʔε੍ޚΛ࣮ݱ͢ ΔͨΊʹίϯςφΛར༻͢Δʹ͋ͨΓɺηΩϡϦςΟͷ໰୊Λ੔ཧ͢Δ
   IUUQTSBOEQFQBCPDPNQBQFSTJQTKODVE[VSBQEG
6. ίϯςφఏڙ࣌ͷηΩϡϦςΟత՝୊  ίϯςφͷ಺෦͔ΒɺίϯςφΛϗετ͍ͯ͠Δ਌ͷ04ʹʮ୤ࠈʯ͕Ͱ ͖Δ৔߹
    ίϯςφͷ಺෦͔Βɺίϯςφͷ֎෦؀ڥ͕ݟ͑ͨΓૢ࡞Ͱ͖Δ৔߹
    ίϯςφͷ಺෦ʹ͍ͭͯɺαʔϏεఏڙऀ͕ҙਤ͠ͳ͍ઃఆมߋ΍ϑΝΠ ϧͷૢ࡞͕Ͱ͖Δ৔߹
    ίϯςφͷىಈ࣌ʹɺαʔϏεఏڙऀ͕ҙਤ͠ͳ͍ίϚϯυɺҾ਺ɺݖ ݶͰͷىಈΛ͞ΕΔ৔߹
7. ίϯςφͷ಺෦ˠίϯςφͷϗετ w͍ΘΏΔʮ୤ࠈʯ -JOVY
   /BNFTQBDF DISPPU $POUBJOFST )PTU
   04
   VODISPPU
   IUUQTHJTUHJUIVCDPN'JMP4PUUJMF
   ❌ ❓❓ ௨ৗɺίϯςφ಺෦͔Βϗετͷ৘ ใ͸ɺ-JOVY
   /BNFTQBDFͳͲʹΑ Γִ཭͞ΕΞΫηεͰ͖ͳ͍ ⚠੬ऑੑɺઃఆϛεɺ࢓্༷ͷൈ͚݀ ͳͲʹΑΓ֎෦ͷ৘ใʹΞΫηεͰ͖Δ ͜ͱ͕͋Δʹʮ୤ࠈʯ
8. ίϯςφͷ಺෦ˠݟͤͨ͘ͳ͍֎෦ wωοτϫʔΫ্ͷଞͷϗετ΁ͷΞΫηεɺ௨৴ͷ๣ௌͳͲ B C D E ίϯςφ
   B
   ͷ؀ڥΛ֎෦ʹఏڙ͢Δ৔߹ɺ
   B
   ͔Βݟ͑ͯ͸͍͚ͳ͍ϛυϧ΢ΣΞ
   D
   ʹΞΫηεͰ͖Δɺ
   B ͔Β؅ཧίϯςφ
   E
   ʹΞΫηεͰ͖ΔɺͳͲ
   B
   ͱ
   E
   ͕ಉ͡WYMBOͷ৔߹ͳͲ΋ߟ͑ΒΕΔͩΖ͏ 0, TFDSFU "ENJO
   DPOUBJOFST $POUBJOFST
   UP
   QSPWJEF ❌ ⭕ ❌
9. ίϯςφͷ಺෦Λӽݖతʹૢ࡞Ͱ͖Δ wίϯςφ಺෦ͷಛݖΛ༩͍͑ͯͳ͍ͷʹɺϑΝΠϧΛૢ࡞Ͱ͖Δ FUDQBTTXE
   FUDTIBEPX
   FUDOHJOYOHJOYDPOG
   QSPDTZT
   WBSSVOEPDLFS  "
   $POUBJOFS ίϯςφ಺ͷ௨ৗϢʔβʔ
   ·ͨ͸ݖݶ੍ݶ͞ΕͨSPPU
   ౰વɺෆཁͳϑΝΠϧૢ࡞͸ෆՄ ⚠
   ੬ऑੑͳͲͷར༻Ͱ
   SPPU
   ʹͳΔ ⚠
   ઃఆ࿙ΕͳͲͰ
   ෆཁͳݖݶ͕෇͍ͯݖݶୣऔ ૢ࡞ ૢ࡞ ⚠
   ݖݶઃఆΛޡͬͯ
   ෇༩Ϛ΢ϯτ͢Δ͜ͱ΋
10. ҙਤ͠ͳ͍Φϓγϣϯ౳Ͱίϯςφىಈ wίϯςφͷىಈΛϢʔβͰίϯτϩʔϧͰ͖Δ৔߹͕͋Δ ਖ਼ৗͳઃఆͰىಈ ෆਖ਼ͳઃఆͰىಈɺ
    ͦͷޙෆਖ਼ͳૢ࡞ ίϯςφͰ͸ͳ͍
    ϛυϧͳͲΛ
    ىಈͤ͞ΒΕΔ ίϯςφىಈͷܖػ
    ͱͳΔΠϕϯτ $*αʔϏε౳
    δϣϒ։࢝ 'BTU$POUBJOFS લஈͷΠϕϯτΛड͚औΔ૚
    OHY@NSVCZEPDLFSE ίϯςφϥϯλΠϜ ⚠
    ෆਖ਼ͳύϥϝʔλΛ౉͞ΕΔɺͳͲ
11. ίϯςφʹ·ͭΘΔ
    ηΩϡϦςΟػߏͷ੔ཧ
12. ίϯςφʹؔ͢ΔηΩϡϦςΟػߏ " 6TFS
    /BNFTQBDF
    # ,FSOFM
    $BQBCJMJUJFT
    $ TFDDPNQ
    % .BOEBUPSZ
    "DDFTT
    $POUSPM
    & 4FSWJDF
    .FTIJOH
    ' 3PPUMFTT6OQSJWJMFHFE
    DPOUBJOFST
    ( )ZQFSWJTPST
13. 6TFS
    /BNFTQBDF wϗετ໊ͳͲͷΑ͏ʹຊདྷ04άϩʔόϧʹଘࡏ͢ΔϦιʔεʹ͍ͭͯ
 04಺෦Ͱ໊લۭؒΛ࡞੒͠ɺ
 ෳ਺Λଘࡏͤ͞࢖͍෼͚Δ
 -JOVY
    /BNFTQBDF
    wϢʔβ*%ʹ໊͍ͭͯલۭؒΛ
 ࡞ΓɺϗετͷඇSPPUΛ
 ίϯςφͷ؅ཧऀʹɻ
14. ,FSOFM
    $BQBCJMJUJFT wSPPUͷ࣋ͭಛݖΛɺ෼ׂ͠ɺҰ෦Λണୣ͋Δ͍͸෇༩Ͱ͖Δ $"1@$)08/
    $"1@,*--
    $"1@4:4@5*.&
    $"1@4:4@"%.*/
    $"1@/&5@3"8
    $"1@/&5@#*/%@4&37*$&
     5SBEJUJPOBM
    SPPU $BQBCJMJUJFT -JNJUFE
    SPPU VTSMPDBMCJOTFSWFSGPP Ұ෦ૢ࡞͕Ͱ͖ͳ͍
 SPPU
    FH
    ࣌ؒૢ࡞͕Ͱ͖ ͳ͍ɺLJMM
    Ͱ͖ͳ͍ ҰൠϢʔβ͕ىಈͯ͠΋
    ಛݖϙʔτΛϦοεϯͰ͖ΔɺͳͲ Ұ෦Λണୣ Ұ෦Λ
    ϑΝΠϧʹ෇༩
15. TFDDPNQ
    
    .BOEBUPSZ
    "DDFTT
    $POUSPM wϢʔβͷࠓͷݖݶʹ͔͔ΘΒͣɺҰ෦ૢ࡞Λ੍ݶɾ؂ࠪ͢Δ
    wTFDDPNQͰ͋Ε͹γεςϜίʔϧɺ."$Ͱ͋Ε͹ϑΝΠϧΞΫηεͳͲ SPPU TFDDPNQ
    ͷίϯςΫετ "QQ"SNPS
    ͷϓϩϑΝΠϧ SPPUͷ࡞੒ͨ͠ϓϩηε SPPUͷ࡞੒ͨ͠ϓϩηε ,FSOFM04 γεςϜίʔϧݺग़ ϑΝΠϧΞΫηεɺ
    ιέοτར༻ͳͲ ❌ ❌ ⭕ ⭕
16. 4FSWJDF
    .FTIJOH wίϯςφಉ࢜ͷ૬ޓͷωοτϫʔΫɺૄ௨ΛɺίʔυͳͲʹΑΓίϯτϩʔϧ ͢Δ͜ͱΛ4FSWJDF
    .FTIͱݺͼɺίϯςφͷจ຺Ͱ࢖ΘΕΔ /PEF
    1PPM
    
    ෳ਺ͷ෺ཧϗετΛ୯Ұͷϓʔϧͱͯ͠ѻͬͨ΋ͷ 4FSWJDF
    .FTI $POUSPM
    1MBOF ίϯςφಉ࢜ͷૄ௨ͷڐՄېࢭ
    FH
    ηΩϡϦςΟάϧʔϓ
    ίϯςφؒͷ௨৴ͷ؂ࠪ
    ௨৴ܦ࿏ͷ҉߸Խ 5-4ଞ
     ❌ ⭕ ✈
17. 3PPUMFTT6OQSJWJMFHFE
    DPOUBJOFST w 
    όΠφϦࣗମΛ
    TFUVTFSJE
    SPPU
    ͢Δ
    w 
    -9$
    ํࣜͷඇಛݖίϯςφʢ6TFS
    /BNFTQBDFΛར༻ʣ
    w 
    /55ਢాࢯʹΑΔ3PPUMFTT
    SVOD΄͔ʢػೳ੍ݶ͋Γʣ
    w ϝϦοτɾσϝϦοτ·ͱΊ όΠφϦͷ
    TFUVJE
    SPPU όΠφϦͷݖݶ͕େ͖͘ɺ
    ͞ΒͳΔ੍ޚΛ͢ΔͨΊͷରԠ͕ඞཁ -9$ํࣜͷඇಛݖίϯςφ Ұ෦όΠφϦΛTFUVJE
    SPPU͢ΔͷͰ
    ίϯςφͷػೳͷมԽͰ௥ՃͳͲରԠ͕ඞཁ 3PPUMFTT
    SVOD ωοτϫʔΫ͕UBQͷΈͳͲ
    ػೳʹ੍ݶ͕͋Δ
18. )ZQFSWJTPS౳ͷར༻ʢ༧ߘͰ͸ະݴٴʣ wίϯςφٕज़ͷηΩϡϦςΟػߏͷଟ͘͸04ͷதͰด͍ͯ͡Δ͕ɺ
 ܰྔͳϋΠύʔόΠβͳͲΛར༻͠ɺͦͷൣғΛ௒͑ͨαϯυϘοΫ εԽΛ࣮ݱ͢Δٕज़͕ݱΕ͍ͯΔ
    wH7JTPS
    ͷ3&"%.&ΑΓ
    IUUQTDMPVEQMBUGPSNHPPHMFCMPHDPN0QFOTPVSDJOHH7JTPSBTBOECPYFEDPOUBJOFSSVOUJNFIUNM
19. Ґஔ෇͚Δ w՝୊͸ΧʔωϧίϯςφϥϯλΠϜͰखް͘Χόʔ
    w՝୊͸4FSWJDF
    .FTIͷਐԽͰ
    w՝୊͸ඇಛݖίϯςφ͕
 ༗ޮ͔
20. ՝୊΁ͷରԠ ػೳ໊ ରԠՄೳͳ՝୊ 6TFS
    /BNFTQBDF 
    
      ,FSOFM
    $BQBCJMJUJFT 
    
     TFDDPNQ 
    
     .BOEBUPSZ
    "DDFTT
    $POUSPM 
    
      4FSWJDF
    .FTI  ඇಛݖίϯςφ  ϋΠύʔόΠβͷར༻ 
    
    
21. ՝୊
    ΁ͷରԠ͸ݶఆత ػೳ໊ ରԠՄೳͳ՝୊ 6TFS
    /BNFTQBDF 
    
      ,FSOFM
    $BQBCJMJUJFT 
    
     TFDDPNQ 
    
     .BOEBUPSZ
    "DDFTT
    $POUSPM 
    
      4FSWJDF
    .FTI  ඇಛݖίϯςφ  ϋΠύʔόΠβͷར༻ 
    
    
22. ఏҊ͢Δ
    όϦσʔγϣϯػߏʹ͍ͭͯ
23. ఏҊ͢Δख๏ wTV&9&$ηΩϡϦςΟϞσϧ ϕʔεͷݕࠪಋೖ
    wTV&9&$ηΩϡϦςΟϞσϧ
    "QBDIF
    )551αʔό͕$(*͋Δ͍͸44*Λ࣮ߦ͢Δࡍʹɺ"QBDIF ࣗମͷϢʔβ
    *%
    ͱ͸
    ҟͳΔϢʔβ
    *%
    Ͱ࣮ߦ͢Δࡍʹߟྀ͍ͯ͠Δ Ϟσϧ
    w ՝୊
    ΁ͷ͞ΒͳΔରԠʹओ؟Λஔ͘
    IUUQTIUUQEBQBDIFPSHEPDTKBTVFYFDIUNM
24. TV&9&$ηΩϡϦςΟϞσϧͱ͸ w·ͣɺTV&9&$ʹ͍ͭͯ "QBDIF
    VTFS
    
    BQBDIF $(*
    QSPDFTT
    
    VTFS
    
    VTFS $(*
    QSPDFTT
    
    VTFS
    
    VTFS TVFYFD
    ίϚϯυ
    IPTU
    GPPFYBNQMFKQ IPTU
    CBSFYBNQMFKQ 7JSUVBM)PTU
    ͝ͱͷઃఆ $(*ͳͲͷ࣮ߦ ͓ޓ͍ʹݖݶ෼཭ γεςϜྖҬ΋ݟ͑ͳ͍ "QBDIFͷઃఆ౳
25. TV&9&$ηΩϡϦςΟϞσϧ͕ඞཁͳཧ༝ wTFUVTFSJE
    SPPU
    ͞ΕͨόΠφϦΛܦ༝࣮ͯ͠ݱ͍ͯ͠ΔͨΊ "QBDIF
    VTFS
    
    BQBDIF $(*
    QSPDFTT
    
    VTFS
    
    VTFS $(*
    QSPDFTT
    
    VTFS
    
    VTFS TVFYFD
    ίϚϯυ
    IPTU
    GPPFYBNQMFKQ IPTU
    CBSFYBNQMFKQ TFUVJE 
    ͳͲΛ࣮ߦ͢ΔͨΊɺ
    TVFYFDίϚϯυ͸TFUVTFSJE
    SPPU
    ͞ΕͨόΠφϦͱͳ͍ͬͯΔɻ
    ඞཁҎ্ͷૢ࡞͕Ͱ͖ͳ͍Α͏ͳ
    Կ͔͠Βରࡦ͕ඞਢ "QBDIFͷઃఆ౳
26. ίϯςφΠϕϯτΛड͚औΔલஈαʔϏε wίϯςφʹ͸ɺىಈΠϕϯτΛड͚औΔલஈαʔϏε͕͋Δ
    w'BTU$POUBJOFSͷOHY@NSVCZɺSVODʹର͢ΔDPOUBJOFSEɺͳͲ /HJOY͸Πϯλʔωοτʹެ։͞ΕΔ
    ݖݶ΁ͷߟྀ͕ඞཁ ͨͩ͠ɺݖݶ੍ޚ͸ೝূͳͲͰߦ͑Δ
27. ίϯςφͷલஈϓϩάϥϜͱൺֱ͢Δ wલஈΛOHY@NSVCZͱͨ͠'BTU$POUBJOFSΞʔΩςΫνϟ OHY@NSVCZ
    VTFS
    
    OHJOY ίϯςφ
    
    VTFS
    
    VTFS ίϯςφ
    
    VTFS
    
    VTFS IBDPOJXB
    ίϚϯυ
    IPTU
    GPPFYBNQMFKQ IPTU
    CBSFYBNQMFKQ ίϯςφϛυϧઃఆ౳ )PTUϔομͳͲ͔Β
    ίϯςφͷ৘ใΛ࡞੒ TFUVJE
    SPPU
    ͍ͨ͠ͷͰ
    ରԠ͕ඞཁ 6TFS
    /BNFTQBDFʹΑΓ
    ίϯςφ಺Ͱ͸SPPU ݖݶ෼཭ ݖݶ෼཭
28. TV&9&$ηΩϡϦςΟϞσϧͷৄࡉ wಛ௃ͱͯ͠͸
    ඞཁҎ্ͷݖݶɾࢀরΛ༩͑ͳ͍
    6/*9Ϣʔβϕʔε
    ن໿ʹΑΔ୲อ
    ෆਖ਼ͳ*%ͳͲ͸ݫ͘͠ݕࠪ
29. ίϯςφͷىಈϓϩηεʹରԠ͢Δ TV&9&$ͷ༻ޠ ίϯςφͰͷରԠ XSBQQFS ίϯςφϥϯλΠϜ XSBQQFSͷ࣮ߦϢʔβ ίϯςφϥϯλΠϜͷલஈαʔϏε ର৅ͷ$(*౳ ίϯςφͷ1*%ϓϩηε
    ʢJOJUͱݺͿʣ ର৅ͱͳΔϢʔβ*% ίϯςφͷJOJU࣮ߦϢʔβ υΩϡϝϯτσΟϨΫτϦ SPPUT
30. ݩͷ෼ྨΛύλʔϯʹ੔ཧ wόϦσʔγϣϯͱͯ͠બ୒తʹॲཧ͢΂͖΋ͷ
    ઃఆͱόΠφϦͷΦ΢φʔҰகɺSPPUGTͷҐஔɺJOJUΛ࣮ߦ͢ΔϢʔβ*%ʹؔ ͢Δ੍ݶɺ؀ڥม਺ͷݕࠪͳͲΛߦ͏ʢϧʔϧʣ
    wΤϥʔͱͯ͠ॲཧ͢΂͖΋ͷ
    *%ͷଘࡏ֬ೝͳͲக໋తͳ΋ͷ͸ඞͣݕࠪ͢Δʢϧʔϧʣ
    wίϯςφͷӡ༻ͷੑ্࣭ɺ࣮૷͢΂͖͔Ͳ͏͔ݕ౼͕ඞཁͳ΋ͷ
    ίϯςφͷػೳͱ୯७ͳରԠؔ܎ʹͳ͍ɾ୯७ରԠΛ͢Δͱӡ༻ͷ໰୊͕ى ͖ͦ͏ͳ΋ͷ͸ࠓճอཹ͢Δʢϧʔϧʣ
31. ࣮૷ͷৄࡉͳํ਑ͳͲิҨ wʮΤϥʔͱͯ͠ॲཧ͢΂͖΋ͷʯͱͨ͠ϧʔϧ͸ద੾ͳΤϥʔϝο ηʔδΛग़͢Α͏ʹ͢Δ
    wબ୒తʹॲཧ͢΂͖΋ͷʹ͍ͭͯ͸ɺϏϧυ࣌ΦϓγϣϯͰͲͷݕࠪ Λ࣮ࢪ͢Δ͔ΛࢦఆՄೳͱ͢ΔɻΦϓγϣϯ͕ଟ͍΄ͲηΩϡΞ͕ͩ ࡞੒Ͱ͖Δίϯςφʹ੍ݶ͕͋Δɻগͳ͍ͱٯͷੑ࣭ͱͳΔɻ
    wϏϧυ࣌Φϓγϣϯʹͨ͠ͷ͸ɺ֎෦ͷઃఆͰ͸ڍಈΛม͑ͳ͍όΠ φϦࣗମͷΦϓγϣϯͱ͠ɺ߈ܸͷػձΛݮΒ͢ͱ͍͏ҙਤ
32. ۩ମత࣮૷ wචऀͷ։ൃ͢ΔίϯςφϥϯλΠϜ
    )BDPOJXB
    Ͱॱ࣮࣍૷͢Δ༧ఆ
    wʮίϯςφϥϯλΠϜͷઃఆϑΝΠϧͱɺίϯςφϥϯλΠϜࣗ਎ͷ Φ΢φʔ͕Ұக͢Δ͔ʯͷݕࠪΛ࣮૷ࡁ
    w)BDPOJXB͸NSVCZͷϏϧυ%4-
 ʢ3VCZ
    %4-ʣΛར༻Ͱ͖
 ॊೈʹϏϧυΦϓγϣϯઃఆՄೳ
33. ·ͱΊ wίϯςφΛར༻ͨ͠ϗεςΟϯά؀ڥͷఏڙʹ͓͍ͯɺ͍͔ͭ͘ߟྀ͢΂͖ ηΩϡϦςΟత՝୊͕͋Δɻ
    wͦͷ͏ͪɺʮఏڙ͢Δίϯςφࣗମͷىಈ࣌ͷηΩϡϦςΟʯʹؔͯ͠͸ɺ ඇಛݖίϯςφ͕༗ޮͰ͋Δ͕ɺͦͷޮՌΛTV&9&$ͷηΩϡϦςΟϞσ ϧΛϕʔεͱͨ͠όϦσʔγϣϯ͕ΑΓߴΊΔͷͰ͸ͳ͍͔
    wҰൠͷ8FCαʔόͷϓϩηεىಈͱίϯςφͷىಈͷҧ͍ʹଈͨ͠ରԠ෇ ͚Λ࣮ͯ͠૷ΛਐΊ͍ͨ
34. ՝୊ɾٞ࿦͍ͨ͠఺
35. ՝୊ w۩ମత࣮૷΁ͷམͱ͠ࠐΈ
    ͜Ε͸ॱ࣍࡞͍ͬͯ͘͹͔ΓͰ͋Δ
    wʮ࣮૷͢΂͖͔Ͳ͏͔ݕ౼͕ඞཁͳ΋ͷʯͷݕ౼
    ͦ΋ͦ΋࣮૷͠ͳ͍͍ͯ͘ͷ͔ɺक͍ͬͯΔ΋ͷͷΤοηϯε͸Կ͔
    wಋೖޙͷ໰୊఺ɺ༗ޮੑͷݕূ
    ύϑΥʔϚϯεɺ࣮ࡍʹ߈ܸΛ๷͛Δ͔ɺӡ༻ཁ݅Λຬ͔ͨ͢FUD
36. ٞ࿦͍ͨ͠ͱ͜Ζ  TV&9&$
    ϞσϧΛώϯτʹͨ͜͠ΕΒͷݕࠪ͸ຊ౰ʹηΩϡΞʹͳΔͷ͔ʁ
    " ίϯςφͷىಈͱҰൠͷ8FCαʔόͷϓϩηεىಈΛൺֱ͍ͯ͠Δ͕ɺ ଥ౰ͳͷ͔Ͳ͏͔
    # 'BTU$POUBJOFS
    ͷΑ͏ͳ৔߹ͷΈͳͷ͔ɺҰൠʹ༗ޮͳͷ͔
     Ұ෦ɺݩͷϞσϧͰͦͷ··ద༻Ͱ͖ͳͦ͏ͳ΋ͷ͕͋Δͱ࿦͕ͨ͡ɺ
 ͦΕΒͷѻ͍ΛͲ͏͢Δͱྑ͍͔ʁ
     ӡ༻ʹ৐ͤͨࡍͷޮՌଌఆʹ͸ͲͷΑ͏ͳํ๏͕ߟ͑ΒΕΔ͔ʁ
37. ࢀߟࢿྉͳͲ w༧ߘ
    IUUQTHJUIVCDPNVE[VSBXTBTHOEESBGUUSFFNBTUFSESBGUSFBENF
    wࢀߟจݙͷ͏ͪɺεϥΠυͰϦϯΫΛࣔ͞ͳ͔ͬͨ΋ͷʢ࿦จ౳ʣ
    w ۙ౻͏͓ͪଞ
    )BDPOJXB
    ϓϩάϥϜʹΑΔɺ૊ΈཱͯՄೳੑͱ֦ுੑΛ࣋ͭ-JOVYίϯςφ
    ৘ใॲཧֶձୈճ શࠃେձߨԋ࿦จू
    
    w দຊ྄հଞ
    'BTU$POUBJOFS
    8FCΞϓϦέʔγϣϯίϯςφͷঢ়ଶΛϦΞΫςΟϒʹܾఆ͢Δίϯςφ؅ཧΞʔΩς Ϋνϟ
    ୈճΠϯλʔωοτͱӡ༻ٕज़ݚڀձ
    
    w দຊ྄հଞ
    8FCαʔόͷߴूੵϚϧνςφϯτΞʔΩςΫνϟͱӡ༻ٕज़
    ిࢠ৘ใ௨৴ֶձ࿦จࢽ#ͷ7PMVNF
    +#
    /P
    
    wλΠτϧը૾͸
    QJYBCBZDPN
    ΑΓɺQVCMJD
    EPNBJOͷ΋ͷΛར༻ͨ͠