August 2016
Intermediate to advanced
384 pages
9h 20m
Japanese
Content preview from Docker
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
332
13 章 セキュリティとコンテナに対する制限
13.8
強化カーネルの利用
ホストのオペレーティングシステムを最新に保ち、パッチも当てておくだけでなく、
grsecurity
（
https://grsecurity.net
）や
PaX
（
https://pax.grsecurity.net
）が提供しているようなパッチを
使って、強化されたカーネルを動作させたいこともあるでしょう。
PaX
は、メモリの改変（バッ
ファオーバーフロー攻撃など）によってプログラムの実行を操作しようとする攻撃者に対する、追
加の保護を提供します。
PaX
はメモリ中のプログラムコードに書き込み不可というマークを、そ
してデータには実行不可というマークを付けることによって、保護を行います。加えてメモリをラ
ンダムに配置することによって、コードを既存の手続き（共通ライブラリ中のシステムコールな
ど）に誘導しようとする攻撃を難しくします。
grsecurity
は
PaX
と共に動作するように設計され
ており、ロールベースのアクセスコントロール（
RBAC
）、監査、そして他のさまざまな機能に関
係するパッチを追加します。
PaX
や
grsecurity
を有効にするには、おそらく自分でカーネルにパッチを当て、コンパイルし
なければなりません。これは一見するよりも尻込みするようなことではなく、大量のリソースが参
照できます（
WikiBooks http://bit.ly/1QMzhC1
及び
InsanityBit http://bit.ly/1QMzntt ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.