<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
<TITLE>Secure Programming for Linux HOWTO: $BB>$N%j%=!<%9$rMxMQ$9$k>l9g$O?5=E$K(B</TITLE>
<LINK HREF="Secure-Programs-HOWTO-8.html" REL=next>
<LINK HREF="Secure-Programs-HOWTO-6.html" REL=previous>
<LINK HREF="Secure-Programs-HOWTO.html#toc7" REL=contents>
</HEAD>
<BODY>
<A HREF="Secure-Programs-HOWTO-8.html">$B<!$N%Z!<%8(B</A>
<A HREF="Secure-Programs-HOWTO-6.html">$BA0$N%Z!<%8(B</A>
<A HREF="Secure-Programs-HOWTO.html#toc7">$BL\<!$X(B</A>
<HR>
<H2><A NAME="s7">7. $BB>$N%j%=!<%9$rMxMQ$9$k>l9g$O?5=E$K(B</A></H2>
<P>
<P>
<H2><A NAME="ss7.1">7.1 $B@5$7$$CM$G$@$18F$S=P$9$3$H(B</A>
</H2>
<P>$BJL$N%W%m%0%i%`$r8F$S=P$9>l9g$O!"$=$N%W%m%0%i%`$,>o$K%Q%i%a%?$H$7$FM-8z$+$D(B
$B;vA0$KM=A[$5$l$F$$$kCM$@$1$r5v2D$7$F$$$k$+$r3NG'$9$kI,MW$,$"$j$^$9!#(B
$B$3$l$O8@$&$h$j$b$:$C$H:$Fq$J$3$H$G$9!#$H8@$&$N$b!"MM!9$J%i%$%V%i%j4X?t$d(B
$B%3%^%s%I$,!"Dc%l%Y%k$N4X?t$r0U30$J$d$jJ}$G8F$S=P$7$F$$$k$+$b$7$l$J$$$+$i$G$9!#(B
$B$?$H$($P(B popen(3)$B$d(B system(3)$B$N$h$&$J%7%9%F%`%3!<%k$N$$$/$D$+$O!"%3%^%s%I(B
$B%7%'%k$r8F$S=P$9$h$&$K<BAu$5$l$F$$$^$9!#$D$^$j%7%'%k$N%a%?%-%c%i%/%?$,$3$l$i(B
$B$N%7%9%F%`%3!<%k$K1F6A$r$*$h$\$9$3$H$r0UL#$7$^$9!#(B
$BF1MM$K(B execlp(3)$B$d(B execvp(3)$B$b%7%'%k$r8F$S=P$9$7$/$_$K$J$C$F$$$^$9!#(B
$B%,%$%I%i%$%s$NB?$/$O(B popen(3)$B!"(Bsystem(3)$B!"(Bexeclp(3)$B$H(B execvp(3)$B$r$^$C$?$/(B
$B;HMQ$7$J$$$h$&$KDs0F$7$F$$$F!"%W%m%;%9$r@8@.$9$k>l9g$K$O(B execve(3)$B$r(B C $B8@8l(B
$B$+$iD>@\8F$S=P$9$h$&$KDs0F$7$F$$$^$9(B [Galvin 1998b]$B!#(B
$BF1MM$JJ}K!$G(B Perl $B$d(B $B%7%'%k$N%P%C%/%/%)!<%H(B(`)$B$b%3%^%s%I%7%'%k$r8F$S=P$7$^$9!#(B
<P>$B$3$NLdBj$NLq2p$JNc$N$R$H$D$K%7%'%k$N%a%?%-%c%i%/%?$,$"$j$^$9!#(B
$BI8=`E*$J(B Linux $B$N%3%^%s%I%7%'%k$O!"2r<a$rFCJL$K9T$&%-%c%i%/%?$,$?$/$5$s$"$j(B
$B$^$9!#(B
$B%7%'%k$K$3$l$i$N%-%c%i%/%?$,EO$k$H!"%(%9%1!<%W$5$l$F$$$J$1$l$P%7%'%k$OFCJL$K(B
$B2r<a$7$^$9!#$3$NJ}K!$r;H$C$F%W%m%0%i%`$,$7$P$7$P2u$5$l$^$9!#(B
WWW Security FAQ [Stein 1999, Q37] $B$K$h$k$H!"%a%?%-%c%i%/%?$O0J2<$N$b$N$G$9!#(B
<PRE>
& ; ` ' \ " | * ? ~ < > ^ ( ) [ ] { } $ \n \r
</PRE>
<P>$B$3$l$i$N%-%c%i%/%?$NFb(B 1 $B$D$G$bK:$l$k$H!"Ha;4$J$3$H$K$J$k$+$b$7$l$^$;$s!#(B
$B$?$H$($P!"%W%m%0%i%`$NB?$/$O%P%C%/%9%i%C%7%e$r%a%?%-%c%i%/%?$H$7$F07$&$3$H$r(B
$BBU$C$F$$$^$9(B[rfp 1999]$B!#(B
$BF~NO$N8!>Z$r@bL@$7$?%;%/%7%g%s$GO@$8$^$7$?$,!"BP:v$H$7$F!"$3$l$i$N%-%c%i%/%?(B
$B$,F~NO$5$l$?$i$9$0$K%(%9%1!<%W$9$k$3$H$r$*4+$a$7$^$9!#(B
<P>$B$3$l$H4XO"$9$kLdBj$H$7$F(B NIL $B%-%c%i%/%?(B($B%-%c%i%/%?$N(B 0)$B$,0U30$J1F6A$r5Z$\$9(B
$B$3$H$,$"$2$i$l$^$9!#(B
C $B$d(B C++ $B$N4X?t$NBgItJ,$O!"(BNIL $B%-%c%i%/%?$,J8;zNs$N=*C<$N0u$HA[Dj$7$F(B
$B$$$^$9$,!"B>$N8@8l(B(Perl $B$d(B Ada95 $B$J$I(B)$B$NJ8;zNs$r07$&4X?t$O(B NIL $B$rJ8;zNs$N(B
$B0lIt$H$7$F07$$$^$9!#%i%$%V%i%j$d%+!<%M%k$N8F$S=P$7$O(B C $B$HF1$807$$$rF'=1(B
$B$7$F$$$^$9$N$G!"%A%'%C%/$9$kFbMF$H<B:];HMQ$5$l$k$3$H$,0lCW$7$F$$$^$;$s(B
[rfp 1999]$B!#(B
<P>$BB>$N%W%m%0%i%`$r8F$S=P$7$?$j!"%U%!%$%k$r;2>H$7$?$j$9$k;~$O!"$$$D$b%U%k%Q%9(B
($B$?$H$($P(B /usr/bin/sort $B$N$h$&$K(B)$B$G;XDj$9$k$h$&$K$7$F$/$@$5$$!#(B
$B$3$&$9$k$3$H$G!"!V4V0c$C$?!W%3%^%s%I$r8F$S=P$9:]$K@8$8$k%(%i!<$rL5$/$9$3$H$,(B
$B$G$-$k$@$1$G$J$/!"(BPATH $B4D6-JQ?t$,4V0c$C$F@_Dj$5$l$F$$$F$b%(%i!<$r2sHr$G$-(B
$B$^$9!#(B
$BB>$N%U%!%$%k$N;2>H$K$D$$$F$b!"!V4V0c$C$?!W3+;O%Q%9$r;XDj$7$?7k2L@8$8$kLdBj(B
$B$r8:$i$;$^$9!#(B
<H2><A NAME="ss7.2">7.2 $B%7%9%F%`%3!<%k$NJV$jCM$O$9$Y$F%A%'%C%/$7$^$7$g$&(B</A>
</H2>
<P>$B%7%9%F%`%3!<%k$G%(%i!<>u67$rJV$;$k$b$N$O!"$9$Y$F$=$N%(%i!<>uBV$r%A%'%C%/$9$k(B
$BI,MW$,$"$j$^$9!#(B
$B$^$:M}M3$H$7$F$"$2$i$l$k$N$O!"%7%9%F%`%3!<%k$N$[$H$s$I$9$Y$F$,!"@)8B$r$+$1$i(B
$B$l$F$$$k%7%9%F%`!&%j%=!<%9$rBP>]$H$7$F$*$j!"$=$N%j%=!<%9$KBP$7$F%f!<%6$O(B
$B$5$^$6$^$JJ}K!$G1F6A$rM?$($k$3$H$,$G$-$F$7$^$&E@$,$"$j$^$9!#(B
setuid/setgid $B$5$l$?%W%m%0%i%`$K$O!"(Bsetrlimit(3)$B$d(B nice(2)$B$N$h$&$J%7%9%F%`(B
$B%3!<%k$r8F$S=P$9$3$H$G!"$=$N%W%m%0%i%`$G;HMQ$9$k%j%=!<%9$K@)8B$r$+$1$k$3$H(B
$B$,$G$-$^$9!#(B
$B%5!<%P!<%W%m%0%i%`$rMxMQ$9$k30It$N%f!<%6$d(B CGI $B%9%/%j%W%H$OF1;~$KB?NL$N%j%/%((B
$B%9%H$r%5!<%P!<$KMW5a$9$k$3$H$G!"%j%=!<%9$r?)$$DY$9$3$H$,$G$-$^$9!#(B
$B%(%i!<$rE,@Z$K07$($F$$$J$$$J$i$P!"$9$G$K=R$Y$?!V%U%'%$%k!&%*!<%W%s!W$r;2>H(B
$B$7$F$/$@$5$$!#(B
<HR>
<A HREF="Secure-Programs-HOWTO-8.html">$B<!$N%Z!<%8(B</A>
<A HREF="Secure-Programs-HOWTO-6.html">$BA0$N%Z!<%8(B</A>
<A HREF="Secure-Programs-HOWTO.html#toc7">$BL\<!$X(B</A>
</BODY>
</HTML>
