{"id":25974,"date":"2025-12-01T08:44:27","date_gmt":"2025-12-01T08:44:27","guid":{"rendered":"https:\/\/pokecon.jp\/job\/?p=25974"},"modified":"2025-12-01T08:44:27","modified_gmt":"2025-12-01T08:44:27","slug":"%e6%99%ae%e6%ae%b5%e4%bd%bf%e3%81%84%e3%81%a7%e3%81%8d%e3%82%8b%e4%bf%9d%e8%ad%b7%e3%83%ac%e3%82%a4%e3%83%a4%e3%83%bc%e3%80%8crestricted-shell%e3%80%8d%e3%81%ae%e7%b4%b9%e4%bb%8b-mizdras-blog","status":"publish","type":"post","link":"https:\/\/pokecon.jp\/job\/25974\/","title":{"rendered":"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb &#8211; mizdra&#8217;s blog"},"content":{"rendered":"\n<\/p>\n<div>\n<p>\u3053\u308c\u306f <a target=\"_blank\" href=\"https:\/\/qiita.com\/advent-calendar\/2025\/hatena\">\u306f\u3066\u306a\u30a8\u30f3\u30b8\u30cb\u30a2 Advent Calendar 2025<\/a> 1\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002<\/p>\n<hr\/>\n<p>\u306f\u3066\u306a\u3067\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u30a8\u30ad\u30b9\u30d1\u30fc\u30c8\u3092\u3057\u3066\u3044\u308b <a target=\"_blank\" href=\"http:\/\/blog.hatena.ne.jp\/mizdra\/\" class=\"hatena-id-icon\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.profile-image.st-hatena.com\/users\/mizdra\/profile.png\" width=\"16\" height=\"16\" alt=\"\" class=\"hatena-id-icon\"\/>id:mizdra<\/a> \u3067\u3059\u3002\u666e\u6bb5\u306f JavaScript \u3092\u66f8\u3044\u3066\u3066\u3001\u8da3\u5473\u3067\u8272\u3005\u306a\u30c4\u30fc\u30eb\u3092\u4f5c\u3063\u3066\u307e\u3059\u3002<\/p>\n<p>\u3068\u3053\u308d\u3067\u6700\u8fd1\u3001npmjs.com \u3078\u306e\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u653b\u6483\u304c\u8a71\u984c\u3067\u3059\u306d\u3002\u4ee5\u524d\u304b\u3089 npmjs.com \u3067\u306f\u30b5\u30d7\u30e9\u30a4\u30c1\u30a7\u30fc\u30f3\u653b\u6483\u304c\u767a\u751f\u3057\u3066\u3044\u307e\u3057\u305f\u304c\u3001\u4eca\u5e74\u306f\u898f\u6a21\u304c\u5927\u304d\u3044\u3082\u306e\u304c\u983b\u7e41\u306b\u767a\u751f\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u306a\u3044\u30fb\u5b9f\u884c\u3057\u306a\u3044\u3053\u3068\u304c\u4e00\u756a\u3067\u306f\u3042\u308b\u306e\u3067\u3059\u304c\u3001\u6628\u4eca\u306e npmjs.com \u3078\u306e\u653b\u6483\u306e\u69d8\u5b50\u3092\u8e0f\u307e\u3048\u308b\u3068\u3001\u305d\u3046\u3082\u8a00\u3063\u3066\u3044\u3089\u308c\u307e\u305b\u3093\u3002\u305d\u306e\u305f\u3081\u3001\u4f55\u500b\u3082\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u3092\u8a2d\u3051\u308b\u300c\u591a\u5c64\u9632\u5fa1\u300d\u3068\u3044\u3046\u8003\u3048\u304c\u91cd\u8981\u3067\u3059\u3002\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u306a\u3044\u30fb\u5b9f\u884c\u3057\u306a\u3044\u305f\u3081\u306e\u5bfe\u7b56\u3068\u306f\u5225\u306b\u3001\u4eee\u306b\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u5b9f\u884c\u3055\u308c\u3066\u3082\u3001\u305d\u306e\u5f71\u97ff\u3092\u6291\u3048\u308b\u5bfe\u7b56\u304c\u3042\u308b\u3068\u826f\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n<p>\u6700\u3082\u624b\u8efd\u306a\u5bfe\u7b56\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u4e0a\u306b\u6a5f\u5bc6\u60c5\u5831\u3092\u7f6e\u304b\u306a\u3044\u3053\u3068\u3067\u3059\u3002\u5177\u4f53\u7684\u306b\u306f\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u3082\u306e\u3067\u3059\u3002<\/p>\n<ul>\n<li>\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b API \u30c8\u30fc\u30af\u30f3\u306a\u3069\u3092\u7f6e\u304b\u306a\u3044\n<\/li>\n<li>CLI \u30c4\u30fc\u30eb (npm, aws, &#8230;) \u306e\u7121\u671f\u9650\u306a\u8a8d\u8a3c\u30c8\u30fc\u30af\u30f3\u3092\u3001\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u7f6e\u304b\u306a\u3044\n<ul>\n<li>\u77ed\u547d\u306a\u3082\u306e\u306b\u3059\u308b (<a target=\"_blank\" href=\"https:\/\/aws.amazon.com\/jp\/blogs\/security\/simplified-developer-access-to-aws-with-aws-login\/\">aws login<\/a> \u306a\u3069)<\/li>\n<li>\u3042\u308b\u3044\u306f OS \u306b\u4fdd\u8b77\u3055\u308c\u305f\u9818\u57df\u306b\u4fdd\u5b58\u3059\u308b (<a target=\"_blank\" href=\"https:\/\/github.com\/sorah\/envchain\">envchain<\/a>)<\/li>\n<\/ul>\n<\/li>\n<li>SSH \u9375\u3082\u30d5\u30a1\u30a4\u30eb\u30b7\u30b9\u30c6\u30e0\u306b\u7f6e\u304b\u306a\u3044\n<\/li>\n<\/ul>\n<p>\u3069\u308c\u3082\u6bd4\u8f03\u7684\u7121\u7406\u306a\u304f\u3067\u304d\u308b\u3082\u306e\u306a\u306e\u3067\u3001\u305c\u3072\u3084\u3063\u3066\u307f\u308b\u3068\u826f\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n<p>\u4e00\u65b9\u3067\u3001Sandbox \u3092\u5229\u7528\u3059\u308b\u3068\u3044\u3046\u5bfe\u7b56\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>Development Container (a.k.a. <a target=\"_blank\" href=\"https:\/\/code.visualstudio.com\/docs\/devcontainers\/containers\">Dev Container<\/a>) \u3092\u4f7f\u3046\n<ul>\n<li>Docker \u30b3\u30f3\u30c6\u30ca\u306e\u4e2d\u3067\u958b\u767a\u3059\u308b<\/li>\n<\/ul>\n<\/li>\n<li>\u30d6\u30e9\u30a6\u30b6\u30d9\u30fc\u30b9\u306e\u958b\u767a\u74b0\u5883\u3092\u4f7f\u3046\n<ul>\n<li>GitHub Codespaces, Stackblitz, vscode.dev \u306a\u3069<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Sandbox \u5185\u306b\u306f\u3001\u305d\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30d5\u30a1\u30a4\u30eb\u3057\u304b mount \u3055\u308c\u307e\u305b\u3093\u3002\u305d\u306e\u305f\u3081\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u306e\u5f71\u97ff\u3092\u305d\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u4e2d\u3060\u3051\u306b\u9650\u5b9a\u3067\u304d\u307e\u3059 <a target=\"_blank\" href=\"#f-12df221e\" id=\"fn-12df221e\" name=\"fn-12df221e\" title=\"\u3082\u3061\u308d\u3093\u30ea\u30dd\u30b8\u30c8\u30ea\u5185\u306b GitHub \u306e Token \u304c\u3042\u3063\u3066\u3001\u305d\u308c\u306b\u3059\u3079\u3066\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u8aad\u307f\u53d6\u308a\u6a29\u9650\u304c\u4ed8\u3044\u3066\u3044\u305f\u308a\u3057\u305f\u3089\u3001\u305d\u306e\u9650\u308a\u3067\u306f\u306a\u3044\u3067\u3059\u304c...\">*1<\/a>\u3002<\/p>\n<h2 id=\"Sandbox-\u3092\u4f7f\u3063\u305f\u5bfe\u7b56\u306e\u6b20\u70b9\">Sandbox \u3092\u4f7f\u3063\u305f\u5bfe\u7b56\u306e\u6b20\u70b9<\/h2>\n<p>Sandbox \u306f\u4fbf\u5229\u306a\u53cd\u9762\u3001\u5c0e\u5165\u304c\u9762\u5012\u306a\u6280\u8853\u3067\u3059\u3002\u4f8b\u3048\u3070\u3001\u30db\u30b9\u30c8\u5074\u304b\u3089\u30dd\u30fc\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u660e\u793a\u7684\u306a\u8a31\u53ef\u304c\u5fc5\u8981\u3067\u3059\u3002\u30dc\u30ea\u30e5\u30fc\u30e0\u306e mount \u306e\u8a2d\u5b9a\u3082\u5fc5\u8981\u3067\u3059\u3002Development Container \u306e\u5834\u5408\u306f\u3001\u4e2d\u3067\u30b7\u30a7\u30eb\u3092\u8d77\u52d5\u3057\u3066\u4f5c\u696d\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u307e\u3059\u304b\u3089\u3001\u305d\u306e\u30b7\u30a7\u30eb\u304b\u3089\u4f7f\u3046 <a target=\"_blank\" href=\"https:\/\/code.visualstudio.com\/docs\/devcontainers\/containers#_dev-container-features\">\u30c4\u30fc\u30eb\u985e\u306e\u8a2d\u5b9a<\/a>\u306a\u3069\u3082\u5fc5\u8981\u3067\u3057\u3087\u3046\u3002\u5834\u5408\u306b\u3088\u3063\u3066\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u5074\u306e\u30b3\u30fc\u30c9\u306e\u6539\u4fee\u3082\u5fc5\u8981\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002<\/p>\n<p>Sandbox \u306f\u5c0e\u5165\u3068\u904b\u7528\u306b\u305d\u308c\u306a\u308a\u306e\u30b3\u30b9\u30c8\u304c\u639b\u304b\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002\u30de\u30eb\u30a6\u30a7\u30a2\u306b\u5bfe\u3059\u308b\u826f\u3044\u5bfe\u7b56\u3060\u3068\u5206\u304b\u3063\u3066\u3044\u3066\u3082\u3001\u4e2d\u3005\u5c0e\u5165\u306f\u96e3\u3057\u3044\u306e\u3067\u3059\u3002<\/p>\n<h2 id=\"restricted-shell\u306e\u7d39\u4ecb\">\u300crestricted shell\u300d\u306e\u7d39\u4ecb<\/h2>\n<p>\u3068\u306f\u3044\u3048\u3001\u3084\u306f\u308a Sandbox \u76f8\u5f53\u306e\u3082\u306e\u306f\u6b32\u3057\u3044\u3067\u3059\u3002\u305d\u3053\u3067 Sandbox \u3068\u540c\u3058\u3088\u3046\u306a\u52b9\u679c\u304c\u5f97\u3089\u308c\u3066\u3001\u3082\u3063\u3068\u624b\u8efd\u306b\u4f7f\u3048\u308b\u3082\u306e\u3092\u4f5c\u3063\u3066\u307f\u307e\u3057\u305f\u3002\u305d\u308c\u304c\u300crestricted shell\u300d\u3067\u3059\u3002\u306f\u3058\u3081\u306b\u8a00\u3063\u3066\u304a\u304d\u307e\u3059\u304c\u3001macOS \u9650\u5b9a\u3001\u304b\u3064 <a target=\"_blank\" href=\"https:\/\/github.com\/x-motemen\/ghq\">ghq<\/a> \u3067\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u7ba1\u7406\u3057\u3066\u3044\u308b\u30e6\u30fc\u30b6\u9650\u5b9a\u3067\u3059\u3002<\/p>\n<p><figure class=\"figure-image figure-image-fotolife\" title=\"restricted shell \u304c\u52d5\u4f5c\u3059\u308b\u69d8\u5b50\u3002\"><span itemscope=\"\" itemtype=\"http:\/\/schema.org\/Photograph\"><img decoding=\"async\" src=\"https:\/\/cdn-ak.f.st-hatena.com\/images\/fotolife\/m\/mizdra\/20251201\/20251201021531.webp\" width=\"1300\" height=\"733\" loading=\"lazy\" title=\"\" class=\"hatena-fotolife\" itemprop=\"image\"\/><\/span><figcaption>restricted shell \u304c\u52d5\u4f5c\u3059\u308b\u69d8\u5b50\u3002<\/figcaption><\/figure>\n<\/p>\n<p>\u30ea\u30dd\u30b8\u30c8\u30ea\u3092 cd \u3059\u308b\u3068\u3001restricted shell \u3068\u3044\u3046\u5236\u9650\u306e\u639b\u304b\u3063\u305f\u30b5\u30d6\u30b7\u30a7\u30eb\u304c\u8d77\u52d5\u3057\u307e\u3059\u3002\u305d\u306e\u4e2d\u3067\u306f\u4eca\u3044\u308b\u30ea\u30dd\u30b8\u30c8\u30ea\u304b\u3089\u4ed6\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308c\u306a\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u4ed6\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30d5\u30a1\u30a4\u30eb\u306e\u8aad\u307f\u53d6\u308a\u304c\u7981\u6b62\u3055\u308c\u308b\u3060\u3051\u3067\u3001\u305d\u308c\u4ee5\u5916\u306e\u5236\u9650\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u305d\u306e\u305f\u3081\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<ul>\n<li><code>npm install<\/code> \u3067\u304d\u308b\n<ul>\n<li>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u306f\u81ea\u7531<\/li>\n<\/ul>\n<\/li>\n<li><code>^R<\/code> \u3067\u30b7\u30a7\u30eb\u306e\u5c65\u6b74\u304c\u898b\u308c\u308b\n<ul>\n<li>\u30db\u30fc\u30e0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u914d\u4e0b\u306e\u30d5\u30a1\u30a4\u30eb\u306f\u8aad\u307f\u53d6\u308a\u5236\u9650\u306a\u3057<\/li>\n<\/ul>\n<\/li>\n<li>\u30d7\u30ed\u30bb\u30b9\u3082\u8d77\u52d5\u3057\u653e\u984c<\/li>\n<\/ul>\n<p>Sandbox \u3068\u3044\u3046\u3088\u308a\u306f\u3001\u975e\u5e38\u306b\u7de9\u3044\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u306e\u3088\u3046\u306a\u3082\u306e\u3067\u3059\u3002\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u3088\u3046\u306b\u3001\u3069\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u3082\u4f7f\u3048\u308b\u3088\u3046\u306b\u3001\u610f\u56f3\u7684\u306b\u7de9\u3044\u5236\u9650\u306b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<p>\u3068\u306f\u3044\u3048\u5236\u9650\u3092\u89e3\u9664\u3057\u3066\u4f5c\u696d\u3057\u305f\u3044\u3053\u3068\u3082\u3042\u308b\u3067\u3057\u3087\u3046\u3002\u305d\u3053\u3067\u8131\u51fa\u30cf\u30c3\u30c1\u3068\u3057\u3066 <code>exit<\/code> \u3067 restricted shell \u3092\u7d42\u4e86\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3066\u307e\u3059\u3002\u307e\u305f\u3001<code>rsh<\/code> \u3067\u518d\u5ea6 restricted shell \u3092\u8d77\u52d5\u3059\u308b\u3053\u3068\u3082\u53ef\u80fd\u3067\u3059\u3002<\/p>\n<p><figure class=\"figure-image figure-image-fotolife\" title=\"exit \u3067 restricted shell \u3092\u7d42\u4e86\u3001rsh \u3067\u518d\u5ea6\u8d77\u52d5\u3059\u308b\u69d8\u5b50\u3002\"><span itemscope=\"\" itemtype=\"http:\/\/schema.org\/Photograph\"><img decoding=\"async\" src=\"https:\/\/cdn-ak.f.st-hatena.com\/images\/fotolife\/m\/mizdra\/20251201\/20251201111154.webp\" width=\"1300\" height=\"714\" loading=\"lazy\" title=\"\" class=\"hatena-fotolife\" itemprop=\"image\"\/><\/span><figcaption>exit \u3067 restricted shell \u3092\u7d42\u4e86\u3001rsh \u3067\u518d\u5ea6\u8d77\u52d5\u3059\u308b\u69d8\u5b50\u3002<\/figcaption><\/figure>\n<\/p>\n<p>\u3042\u3068\u30b5\u30d6\u30b7\u30a7\u30eb (restricted shell) \u304b\u3089\u629c\u3051\u308b\u6642\u306b\u3001\u30b5\u30d6\u30b7\u30a7\u30eb\u306e\u5c65\u6b74\u3068\u30ab\u30ec\u30f3\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u89aa\u30b7\u30a7\u30eb\u306b\u5f15\u304d\u7d99\u3050\u3088\u3046\u306b\u3057\u3066\u307e\u3059\u3002\u305d\u306e\u304a\u304b\u3052\u3067\u3001restricted shell \u3092\u7d42\u4e86\u3057\u3066\u3082\u30b7\u30fc\u30e0\u30ec\u30b9\u306b\u4f5c\u696d\u3092\u7d99\u7d9a\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u666e\u6bb5\u4f7f\u3044\u3059\u308b\u3082\u306e\u306a\u306e\u3067\u3001\u4f7f\u3044\u52dd\u624b\u306b\u306f\u62d8\u3063\u3066\u8a2d\u8a08\u3057\u3066\u307e\u3059\u3002<\/p>\n<h2 id=\"\u4ed5\u7d44\u307f\">\u4ed5\u7d44\u307f<\/h2>\n<p>Apple Seatbelt \u3068\u3044\u3046\u6280\u8853\u3092\u4f7f\u3063\u3066\u3044\u307e\u3059\u3002macOS \u306b\u642d\u8f09\u3055\u308c\u3066\u3044\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4fdd\u8b77\u6a5f\u80fd\u3067\u3001\u30eb\u30fc\u30eb\u30d9\u30fc\u30b9\u3067\u30d7\u30ed\u30bb\u30b9\u306b\u5236\u9650\u3092\u304b\u3051\u3089\u308c\u307e\u3059\u3002<\/p>\n<p><iframe src=\"https:\/\/hatenablog-parts.com\/embed?url=https%3A%2F%2Fyuzuhara.hatenablog.jp%2Fentry%2F2011%2F12%2F27%2F235521\" title=\"Apple Sandbox(Seatbelt)\u3092\u30fb\u30fb\u30fb\u5f37\u3044\u3089\u308c\u3066\u3044\u308b\u3093\u3060\uff01 - yuzuhara\u306e\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\" loading=\"lazy\"><\/iframe><cite class=\"hatena-citation\"><a target=\"_blank\" href=\"https:\/\/yuzuhara.hatenablog.jp\/entry\/2011\/12\/27\/235521\">yuzuhara.hatenablog.jp<\/a><\/cite><\/p>\n<p><iframe src=\"https:\/\/hatenablog-parts.com\/embed?url=https%3A%2F%2Fblog.syum.ai%2Fentry%2F2025%2F04%2F27%2F232946\" title=\"macOS\u306eApple Seatbelt (sandbox-exec) \u306b\u3064\u3044\u3066\u8abf\u3079\u305f - \u713c\u58f2\u98ef\u5e97\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\" loading=\"lazy\"><\/iframe><cite class=\"hatena-citation\"><a target=\"_blank\" href=\"https:\/\/blog.syum.ai\/entry\/2025\/04\/27\/232946\">blog.syum.ai<\/a><\/cite><\/p>\n<p>\u4eca\u56de\u306f\u3053\u306e Apple Seatbelt \u3067\u3001\u7279\u5b9a\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u5236\u9650\u3055\u308c\u305f\u30b5\u30d6\u30b7\u30a7\u30eb\u3092\u7acb\u3061\u4e0a\u3052\u3066\u3044\u307e\u3059\u3002Apple Seatbelt \u306b\u3088\u308b\u5236\u9650\u306f\u3001\u89aa\u30d7\u30ed\u30bb\u30b9\u304b\u3089\u5b50\u30d7\u30ed\u30bb\u30b9\u3078\u3068\u7d99\u627f\u3055\u308c\u307e\u3059\u3002\u305d\u306e\u305f\u3081\u3001\u30b5\u30d6\u30b7\u30a7\u30eb\u5185\u304b\u3089\u8d77\u52d5\u3055\u308c\u308b\u3042\u3089\u3086\u308b\u30d7\u30ed\u30bb\u30b9 (<code>ls ..<\/code> \u306a\u3069) \u304c\u5236\u9650\u3092\u7d99\u627f\u3057\u3001<code>ls ..<\/code> \u306a\u3069\u304c\u30a8\u30e9\u30fc\u3067\u30b3\u30b1\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<h2 id=\"\u5b9f\u88c5\">\u5b9f\u88c5<\/h2>\n<p>\u5b9f\u88c5\u306f Apple Seatbelt \u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3001<code>.zshrc<\/code>\u3001\u30d7\u30ed\u30f3\u30d7\u30c8\u306e\u8a2d\u5b9a (starship.toml) \u306b\u5206\u304b\u308c\u3066\u3044\u307e\u3059\u3002\u307e\u305a Apple Seatbelt \u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u304b\u3089\u3002<\/p>\n<pre class=\"code\" data-lang=\"\" data-unlink=\"\">;; .config\/sandbox\/restricted-shell.sb\n(version 1)\n(allow default)\n\n(deny file-read*\n  (subpath (param \"GHQ_ROOT\"))\n)\n\n(allow file-read*\n  (subpath (param \"REPOSITORY\"))\n)\n\n;; starship \u304c\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u89aa\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u3092\u8aad\u307f\u306b\u884c\u304f\u3088\u3046\u306a\u306e\u3067\u3001\u4f8b\u5916\u7684\u306b\u8a31\u53ef\u3002\n;; \u672c\u5f53\u306f\u3082\u3046\u3061\u3087\u3063\u3068\u53b3\u3057\u304f\u3057\u305f\u3044\u3002\n(allow file-read-metadata\n  (subpath (param \"GHQ_ROOT\"))\n)<\/pre>\n<p><code>REPOSITORY<\/code> \u304c\u4eca cd \u3057\u3066\u308b\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30d1\u30b9\u3092\u8868\u3059\u30d1\u30e9\u30e1\u30fc\u30bf\u3067\u3001<code>GHQ_ROOT<\/code> \u304c ghq \u306e\u30eb\u30fc\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u8868\u3059\u30d1\u30e9\u30e1\u30fc\u30bf\u3067\u3059\u3002\u4e00\u62ec\u3067 <code>GHQ_ROOT<\/code> \u306e\u8aad\u307f\u53d6\u308a\u3092\u7981\u6b62\u3057\u3001\u305d\u306e\u4e0a\u3067 <code>REPOSITORY<\/code> \u3092\u4f8b\u5916\u7684\u306b\u8a31\u53ef\u3057\u3066\u307e\u3059\u3002<\/p>\n<p><code>.zshrc<\/code> \u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3002<\/p>\n<pre class=\"code lang-zsh\" data-lang=\"zsh\" data-unlink=\"\">PREV_REPOSITORY=<span class=\"synConstant\">\"\"<\/span>\n<span class=\"synStatement\">function<\/span> start-restricted-shell-if-needed() {\n  <span class=\"synType\">local<\/span> ghq_root=<span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$(<\/span><span class=\"synConstant\">ghq root<\/span><span class=\"synPreProc\">)<\/span><span class=\"synConstant\">\"<\/span>\n  <span class=\"synType\">local<\/span> repository=<span class=\"synConstant\">\"\"<\/span>\n  [[ <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$PWD<\/span><span class=\"synConstant\">\"<\/span> =~ ^<span class=\"synPreProc\">$ghq_root<\/span>\/[^\/]+\/[^\/]+\/[^\/]+ ]] &amp;&amp; repository=<span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$MATCH<\/span><span class=\"synConstant\">\"<\/span>\n  \n  <span class=\"synStatement\">if<\/span> [[ -z <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$repository<\/span><span class=\"synConstant\">\"<\/span> ]]; <span class=\"synStatement\">then<\/span>\n    PREV_REPOSITORY=<span class=\"synConstant\">\"\"<\/span>\n  <span class=\"synStatement\">elif<\/span> [[ <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$RESTRICTED_SHELL<\/span><span class=\"synConstant\">\"<\/span> != <span class=\"synConstant\">\"1\"<\/span> &amp;&amp; <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$repository<\/span><span class=\"synConstant\">\"<\/span> != <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$PREV_REPOSITORY<\/span><span class=\"synConstant\">\"<\/span> ]]; <span class=\"synStatement\">then<\/span>\n    PREV_REPOSITORY=<span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$repository<\/span><span class=\"synConstant\">\"<\/span>\n    <span class=\"synStatement\">echo<\/span> <span class=\"synConstant\">\"info: Start a restricted shell. (To exit, type 'exit'.)\"<\/span>\n    RESTRICTED_SHELL=<span class=\"synConstant\">1<\/span> sandbox-exec -f ~\/.config\/sandbox\/restricted-shell.sb -D GHQ_ROOT=<span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$ghq_root<\/span><span class=\"synConstant\">\"<\/span> -D REPOSITORY=<span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$repository<\/span><span class=\"synConstant\">\"<\/span> <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$SHELL<\/span><span class=\"synConstant\">\"<\/span>\n    <span class=\"synStatement\">fc<\/span> -R\n    <span class=\"synStatement\">cd<\/span> <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$(<\/span><span class=\"synStatement\">&lt;<\/span><span class=\"synConstant\">\/tmp\/rsh-pwd<\/span><span class=\"synPreProc\">)<\/span><span class=\"synConstant\">\"<\/span>\n  <span class=\"synStatement\">fi<\/span>\n}\n<span class=\"synStatement\">function<\/span> restricted-shell-exit() {\n  <span class=\"synStatement\">if<\/span> [[ <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$RESTRICTED_SHELL<\/span><span class=\"synConstant\">\"<\/span> == <span class=\"synConstant\">\"1\"<\/span> ]]; <span class=\"synStatement\">then<\/span>\n    <span class=\"synStatement\">pwd<\/span> <span class=\"synStatement\">&gt;<\/span> \/tmp\/rsh-pwd\n  <span class=\"synStatement\">fi<\/span>\n}\n<span class=\"synStatement\">autoload<\/span> -Uz add-zsh-hook\nadd-zsh-hook precmd start-restricted-shell-if-needed\nadd-zsh-hook zshexit restricted-shell-exit\n<span class=\"synStatement\">alias<\/span> rsh=<span class=\"synConstant\">'PREV_REPOSITORY=\"\" start-restricted-shell-if-needed'<\/span>\n<\/pre>\n<p>\u8272\u3005\u66f8\u3044\u3066\u3042\u308a\u307e\u3059\u304c\u3001\u91cd\u8981\u306a\u306e\u306f <code>add-zsh-hook precmd ...<\/code> \u306e\u90e8\u5206\u3068\u3001<code>start-restricted-shell-if-needed<\/code> \u95a2\u6570\u306e\u4e2d\u8eab\u3067\u3059\u3002zsh \u306e <code>precmd<\/code> hook \u3092\u4f7f\u3044\u3001\u30d7\u30ed\u30f3\u30d7\u30c8\u304c\u8868\u793a\u3055\u308c\u308b\u969b\u306b\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304b\u3069\u3046\u304b\u30c1\u30a7\u30c3\u30af\u3057\u3066\u307e\u3059\u3002\u305d\u3057\u3066\u3001\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306a\u3089 <code>RESTRICTED_SHELL=1 sandbox-exec -f ~\/.config\/sandbox\/restricted-shell.sb ... $SHELL<\/code> \u3067\u30b5\u30d6\u30b7\u30a7\u30eb\u3092\u8d77\u52d5\u3057\u3066\u307e\u3059\u3002\u30b3\u30fc\u30c9\u306e\u4ed6\u306e\u90e8\u5206\u306f\u3001 \u30b5\u30d6\u30b7\u30a7\u30eb\u306e\u5c65\u6b74\u3068\u30ab\u30ec\u30f3\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u5f15\u304d\u7d99\u304e\u3001<code>rsh<\/code> \u30b3\u30de\u30f3\u30c9\u306b\u95a2\u3059\u308b\u3082\u306e\u3067\u3059\u3002\u8272\u3005\u306a\u6a5f\u80fd\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u3053\u308c\u5168\u90e8\u3067 25 \u884c\u3067\u6e08\u3093\u3067\u307e\u3059\u3002<\/p>\n<p>\u6700\u5f8c\u306b\u3001\u30d7\u30ed\u30f3\u30d7\u30c8\u306e\u8a2d\u5b9a (<code>starship.toml<\/code>) \u3067\u3059\u3002<code>RESTRICTED_SHELL=1<\/code> \u306a\u3089\u9375\u306e\u7d75\u6587\u5b57\u3092\u51fa\u3057\u3066\u308b\u3060\u3051\u3067\u3059\u3002\u3053\u308c\u306e\u5c0e\u5165\u306f\u5fc5\u9808\u3067\u306f\u306a\u3044\u3067\u3059\u304c\u3001\u3042\u308b\u3068\u4fbf\u5229\u3067\u3059\u3002<\/p>\n<pre class=\"code lang-toml\" data-lang=\"toml\" data-unlink=\"\"><span class=\"synIdentifier\">format<\/span> = <span class=\"synConstant\">\"\"\"<\/span>\n<span class=\"synConstant\">$time<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$cmd_duration<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$jobs<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$status<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$username<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$hostname<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$localip<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$shlvl<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$directory<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$git_branch<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$git_state<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$git_metrics<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$git_status<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$custom<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$sudo<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$shell<\/span><span class=\"synSpecial\">\\<\/span>\n<span class=\"synConstant\">$character\"\"\"<\/span>\n\n[custom.restricted_shell]\n<span class=\"synIdentifier\">command<\/span> = <span class=\"synConstant\">\"echo \ud83d\udd12\"<\/span>\n<span class=\"synIdentifier\">when<\/span> = <span class=\"synConstant\">''' test \"$RESTRICTED_SHELL\" = 1 '''<\/span>\n<\/pre>\n<p>starship \u3092\u4f7f\u3063\u3066\u306a\u3044\u4eba\u306f\u3001\u306a\u3093\u304b\u4e0a\u624b\u3044\u3053\u3068\u3084\u3063\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<h2 id=\"\u5b9f\u969b\u4f7f\u3063\u3066\u307f\u3066\u3069\u3046\u304b\">\u5b9f\u969b\u4f7f\u3063\u3066\u307f\u3066\u3069\u3046\u304b<\/h2>\n<p>\u307e\u3060\u4f7f\u3044\u59cb\u3081\u3066 1 \u9031\u9593\u304f\u3089\u3044\u3067\u3059\u304c\u3001\u8da3\u5473\u3067\u3082\u696d\u52d9\u3067\u3082\u82e6\u306a\u304f\u4f7f\u3048\u3066\u3044\u307e\u3059\u3002\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u3068\u3057\u3066\u306e\u5f79\u76ee\u306f\u679c\u305f\u305b\u3066\u305d\u3046\u3067\u3059\u3002<\/p>\n<p>\u3061\u306a\u307f\u306b <code>open .<\/code> \u3067 Finder \u3067\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u958b\u304f\u306e\u3082\u3001\u3061\u3083\u3093\u3068\u52d5\u304d\u307e\u3059\u3002\u5f53\u521d\u306f Finder \u304c Apple Seatbelt \u306e\u5236\u9650\u3092\u5f15\u304d\u7d99\u3050\u305b\u3044\u3067\u4e0a\u624b\u304f\u52d5\u304b\u306a\u3044\u306e\u3067\u306f\u3001\u3068\u601d\u3063\u3066\u3044\u305f\u306e\u3067\u3059\u304c\u3001\u5236\u9650\u3092\u5f15\u304d\u7d99\u304c\u305a\u306b\u8d77\u52d5\u3055\u308c\u308b\u3088\u3046\u3067\u3059\u3002<code>open<\/code> \u3067\u8d77\u52d5\u3055\u308c\u305f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306f\u3001\u30b7\u30a7\u30eb\u3067\u306f\u306a\u304f <code>launchd<\/code> \u304c\u89aa\u30d7\u30ed\u30bb\u30b9\u306b\u306a\u308a\u3001\u305d\u306e\u7d50\u679c Apple Seatbelt \u306b\u3088\u308b\u4fdd\u8b77\u304c\u52b9\u304b\u306a\u3044\u3088\u3046\u3067\u3059\u3002\u4fdd\u8b77\u3092\u56de\u907f\u3067\u304d\u3066\u5b89\u5168\u6027\u304c\u4e0b\u304c\u3063\u3066\u3057\u307e\u3063\u3066\u307e\u3059\u304c\u3001\u666e\u6bb5\u4f7f\u3044\u3059\u308b\u5206\u306b\u306f\u3053\u3061\u3089\u306e\u307b\u3046\u304c\u90fd\u5408\u304c\u826f\u3044\u3068\u3082\u8a00\u3048\u307e\u3059\u3002<\/p>\n<p>\u3061\u3087\u3063\u3068\u3057\u305f\u30c8\u30e9\u30d6\u30eb\u3082\u3042\u308a\u307e\u3057\u305f\u3002VS Code \u3092\u30b7\u30a7\u30eb\u304b\u3089\u8d77\u52d5\u3059\u308b <code>code<\/code> \u30b3\u30de\u30f3\u30c9\u304c\u4e0a\u624b\u304f\u52d5\u4f5c\u3057\u306a\u3044\u306e\u3067\u3059\u3002\u5177\u4f53\u7684\u306b\u306f\u3001<code>code .<\/code> \u3068\u6253\u3063\u3066\u3082\u3001\u30ab\u30ec\u30f3\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092 workspace \u3068\u3057\u3066\u958b\u3044\u3066\u304f\u308c\u307e\u305b\u3093\u3002<\/p>\n<p><figure class=\"figure-image figure-image-fotolife\" title=\"\u30ab\u30ec\u30f3\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304c workspace \u3068\u3057\u3066\u958b\u304b\u308c\u306a\u3044\u69d8\u5b50\u3002\"><span itemscope=\"\" itemtype=\"http:\/\/schema.org\/Photograph\"><img decoding=\"async\" src=\"https:\/\/cdn-ak.f.st-hatena.com\/images\/fotolife\/m\/mizdra\/20251201\/20251201113924.webp\" width=\"1300\" height=\"760\" loading=\"lazy\" title=\"\" class=\"hatena-fotolife\" itemprop=\"image\"\/><\/span><figcaption>\u30ab\u30ec\u30f3\u30c8\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304c workspace \u3068\u3057\u3066\u958b\u304b\u308c\u306a\u3044\u69d8\u5b50\u3002<\/figcaption><\/figure>\n<\/p>\n<p><code>code<\/code> \u30b3\u30de\u30f3\u30c9\u306e\u5185\u90e8\u3067\u306f <code>open -n<\/code> \u3067 VS Code \u3092\u8d77\u52d5\u3059\u308b\u306e\u3067\u3059\u304c\u3001\u305d\u306e <code>-n<\/code> \u30aa\u30d7\u30b7\u30e7\u30f3 (\u65e2\u306b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c\u8d77\u52d5\u3057\u3066\u3044\u3066\u3082\u65b0\u3057\u3044\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u8d77\u52d5\u3059\u308b\u30aa\u30d7\u30b7\u30e7\u30f3) \u306e\u6319\u52d5\u304c Apple Seatbelt \u306e\u6709\u7121\u3067\u5909\u308f\u308b\u3088\u3046\u3067\u3059\u3002<\/p>\n<p>\u3069\u3046\u3084\u3089 Apple Seatbelt \u3067\u306f <code>(allow default)<\/code> \u3057\u3066\u3044\u3066\u3082\u3001\u5f37\u5236\u7684\u306b\u8ab2\u3055\u308c\u308b\u5236\u9650\u304c\u3042\u308b\u3088\u3046\u3067\u3059\u3002<a target=\"_blank\" href=\"http:\/\/blog.hatena.ne.jp\/mizdra\/\" class=\"hatena-id-icon\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.profile-image.st-hatena.com\/users\/mizdra\/profile.png\" width=\"16\" height=\"16\" alt=\"\" class=\"hatena-id-icon\"\/>id:mizdra<\/a> \u304c\u78ba\u8a8d\u3057\u305f\u9650\u308a\u3067\u306f\u3001<code>ps<\/code> \u30b3\u30de\u30f3\u30c9\u3084 <code>top<\/code> \u30b3\u30de\u30f3\u30c9\u306e\u5b9f\u884c\u304c\u5236\u9650\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002<\/p>\n<pre class=\"code\" data-lang=\"\" data-unlink=\"\">;; ~\/.config\/sandbox\/allow-default.sb\n(version 1)\n(allow default)<\/pre>\n<pre class=\"code console\" data-lang=\"console\" data-unlink=\"\">$ sandbox-exec -f ~\/.config\/sandbox\/allow-default.sb ps\nsandbox-exec: execvp() of 'ps' failed: Operation not permitted\n$ sandbox-exec -f ~\/.config\/sandbox\/allow-default.sb top\nsandbox-exec: execvp() of 'top' failed: Operation not permitted<\/pre>\n<p>\u6050\u3089\u304f\u3001\u4ed6\u306e\u30d7\u30ed\u30bb\u30b9\u306e\u60c5\u5831\u306e\u53d6\u5f97\u304c\u5236\u9650\u3055\u308c\u3066\u3044\u308b\u306e\u3060\u3068\u601d\u3044\u307e\u3059\u3002\u305d\u306e\u305f\u3081 <code>open -n<\/code> \u306e\u3088\u3046\u306a\u30b3\u30de\u30f3\u30c9\u304c\u52d5\u304b\u306a\u3044\u306e\u3067\u3057\u3087\u3046\u3002<\/p>\n<p>\u8272\u3005\u8abf\u3079\u305f\u3068\u3053\u308d\u3001<code>code<\/code> \u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u308f\u305a\u306b\u76f4\u63a5 <code>open<\/code> \u30b3\u30de\u30f3\u30c9\u3067 VS Code \u3092\u958b\u3051\u3070\u3001\u554f\u984c\u3092\u56de\u907f\u3067\u304d\u308b\u3088\u3046\u3067\u3057\u305f\u3002\u50d5\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306a alias \u3092\u8cbc\u308b\u3088\u3046\u306b\u3057\u3066\u307e\u3059\u3002<\/p>\n<pre class=\"code lang-zsh\" data-lang=\"zsh\" data-unlink=\"\"><span class=\"synStatement\">if<\/span> [[ <span class=\"synConstant\">\"<\/span><span class=\"synPreProc\">$RESTRICTED_SHELL<\/span><span class=\"synConstant\">\"<\/span> == <span class=\"synConstant\">\"1\"<\/span> ]]; <span class=\"synStatement\">then<\/span>\n  <span class=\"synStatement\">alias<\/span> code=<span class=\"synConstant\">'open -a \"Visual Studio Code\"'<\/span>\n<span class=\"synStatement\">fi<\/span>\n<\/pre>\n<p>\u3068\u306f\u3044\u3048\u3053\u308c\u3082\u5b8c\u74a7\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<code>code --wait<\/code> \u306e\u3088\u3046\u306a\u30aa\u30d7\u30b7\u30e7\u30f3\u304c\u52d5\u4f5c\u3057\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3059 <a target=\"_blank\" href=\"#f-b724c87b\" id=\"fn-b724c87b\" name=\"fn-b724c87b\" title=\"--wait \u306e\u30cf\u30f3\u30c9\u30ea\u30f3\u30b0\u304c code \u30b3\u30de\u30f3\u30c9\u306e\u4e2d\u3067\u884c\u308f\u308c\u3066\u3044\u308b\u305f\u3081\u3067\u3059\">*2<\/a>\u3002<code>EDITOR=\"code --wait\"<\/code> \u3092\u4f7f\u3063\u3066\u308b\u4eba\u306f <code>EDITOR=\"vim\"<\/code> \u306b\u5207\u308a\u66ff\u3048\u305f\u308a\u3068\u3001\u8ffd\u52a0\u306e\u5bfe\u7b56\u3092\u5c0e\u5165\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p><code>code .<\/code> \u304c\u52d5\u304b\u306a\u3044\u306e\u306f\u3061\u3087\u3063\u3068\u9762\u5012\u3067\u3059\u304c\u3001\u56de\u907f\u7b56\u3082\u3042\u308b\u306e\u3067\u307e\u3042&#8230;\u3068\u3044\u3046\u611f\u3058\u3067\u3059\u306d\u3002<\/p>\n<h2 id=\"\u9762\u767d\u3044\u3068\u3053\u308d\">\u9762\u767d\u3044\u3068\u3053\u308d<\/h2>\n<p>\u3061\u3087\u3063\u3068\u9762\u767d\u3044\u306e\u306f\u3001<code>restricted-shell.sb<\/code> \u3092\u7de8\u96c6\u3059\u308b\u3053\u3068\u3067\u81ea\u7531\u306b\u4fdd\u8b77\u30ec\u30d9\u30eb\u3092\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3067\u304d\u308b\u3068\u3053\u308d\u3067\u3059\u3002<code>.zshrc<\/code> \u3084 <code>restricted-shell.sb<\/code> \u306e\u66f8\u304d\u63db\u3048\u3092\u7981\u6b62\u3057\u305f\u308a\u3001<code>open<\/code> \u3084 <code>docker<\/code> \u306e\u8d77\u52d5\u3092\u7981\u6b62\u3057\u305f\u308a\u3002\u597d\u307f\u306b\u5fdc\u3058\u3066\u5909\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n<p>\u3084\u308d\u3046\u3068\u601d\u3048\u3070\u3046\u3093\u3068\u53b3\u3057\u304f\u3082\u3067\u304d\u307e\u3059\u3002Apple Seatbelt \u3067\u306f <code>(deny default)<\/code> \u3068\u66f8\u304f\u3068\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5168\u3066\u304c\u7981\u6b62\u3055\u308c\u3001allowlist \u306e\u3088\u3046\u306a\u5f62\u3067\u30eb\u30fc\u30eb\u3092\u8a18\u8ff0\u3059\u308b\u30e2\u30fc\u30c9\u306b\u306a\u308a\u307e\u3059\u3002\u305d\u3046\u3059\u308c\u3070\u3001Sandbox \u306e\u3088\u3046\u306a\u53b3\u3057\u3044\u5236\u9650\u3082\u8ab2\u305b\u308b\u3068\u601d\u3044\u307e\u3059\u3002\u307e\u3042\u666e\u6bb5\u4f7f\u3044\u3059\u308b\u306b\u306f\u53b3\u3057\u3044\u3067\u3057\u3087\u3046\u304c&#8230; \u305d\u308c\u3084\u308b\u304f\u3089\u3044\u306a\u3089\u3001\u666e\u901a\u306b Development Container \u4f7f\u3063\u305f\u3089\u826f\u3044\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<h2 id=\"macOS-\u4ee5\u5916\u3078\u306e\u79fb\u690d\">macOS \u4ee5\u5916\u3078\u306e\u79fb\u690d<\/h2>\n<p>Apple Seatbelt \u76f8\u5f53\u306e\u3082\u306e\u304c\u3042\u308c\u3070\u3001\u4ed6\u306e OS \u3078\u3082\u79fb\u690d\u3067\u304d\u308b\u306f\u305a\u3067\u3059\u3002<\/p>\n<p>\u50d5\u306f\u8a73\u3057\u304f\u306a\u3044\u3067\u3059\u304c\u3001Linux \u3060\u3068 AppArmor \u3068\u3044\u3046\u3082\u306e\u304c\u4f7f\u3048\u308b\u305d\u3046\u3067\u3059\u3002\u5f8c\u65e5\u540c\u50da\u306e <a target=\"_blank\" href=\"http:\/\/blog.hatena.ne.jp\/Windymelt\/\" class=\"hatena-id-icon\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.profile-image.st-hatena.com\/users\/Windymelt\/profile.png\" width=\"16\" height=\"16\" alt=\"\" class=\"hatena-id-icon\"\/>id:Windymelt<\/a> \u3055\u3093\u304c Linux \u7248\u306e\u8a18\u4e8b\u3092\u66f8\u3044\u3066\u4e0b\u3055\u308b\u3088\u3046\u306a\u306e\u3067\u3001\u305d\u308c\u3092\u5f85\u3063\u3066\u4e0b\u3055\u3044\u3002<\/p>\n<p>\u305d\u308c\u4ee5\u5916\u306e OS \u306b\u3064\u3044\u3066\u3082\u3001\u8208\u5473\u304c\u3042\u308b\u4eba\u304c\u3044\u305f\u3089\u79fb\u690d\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<h2 id=\"\u5927\u4e8b\u306a\u3053\u3068\">\u5927\u4e8b\u306a\u3053\u3068<\/h2>\n<p>\u3082\u3061\u308d\u3093\u3001restricted shell \u306f\u5b8c\u74a7\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002restricted shell \u306f (\u5c11\u306a\u304f\u3068\u3082\u4eca\u56de\u7d39\u4ecb\u3057\u305f sb \u30d5\u30a1\u30a4\u30eb\u3067\u306f) \u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u304f\u3089\u3044\u3057\u304b\u5236\u9650\u3057\u3066\u307e\u305b\u3093\u3002\u30de\u30eb\u30a6\u30a7\u30a2\u304b\u3089\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30ea\u30af\u30a8\u30b9\u30c8\u3082\u3001\u30d7\u30ed\u30bb\u30b9\u306e\u8d77\u52d5\u3082\u4ed5\u653e\u984c\u3067\u3059\u3002<code>open<\/code> \u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u3048\u3070\u4fdd\u8b77\u3092\u56de\u907f\u3067\u304d\u307e\u3059\u3002\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u672c\u6c17\u3092\u51fa\u305b\u3070\u3001\u304d\u3063\u3068\u8272\u3005\u306a\u3053\u3068\u304c\u3067\u304d\u3066\u3057\u307e\u3046\u3067\u3057\u3087\u3046\u3002Sandbox \u3068\u547c\u3076\u306b\u306f\u304a\u7c97\u672b\u306a\u3082\u306e\u3067\u3059\u3002<\/p>\n<p>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u306b\u9280\u306e\u5f3e\u4e38\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u69d8\u3005\u306a\u5bfe\u7b56\u3092\u5e7e\u91cd\u306b\u3082\u5c0e\u5165\u3057\u3001\u5730\u9053\u306b\u30ea\u30b9\u30af\u3092\u4e0b\u3052\u3066\u3044\u304f\u3079\u304d\u3067\u3059\u3002\u4f8b\u3048\u3070\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u3053\u3068\u3092\u3084\u308b\u3068\u826f\u3044\u3067\u3057\u3087\u3046\u3002<\/p>\n<ul>\n<li>npm package \u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u306b postinstall script \u3092\u5b9f\u884c\u3057\u306a\u3044\n<ul>\n<li>pnpm \u3092\u4f7f\u3046 or npm \u3067 <code>npm config set ignore-scripts true<\/code> \u3059\u308b<\/li>\n<\/ul>\n<\/li>\n<li>pnpm \u3067 <code>minimumReleaseAge<\/code> \u3092\u8a2d\u5b9a\u3059\u308b\n<\/li>\n<li><a target=\"_blank\" href=\"https:\/\/socket.dev\/blog\/introducing-socket-firewall\">Socket Firewall<\/a> \u3092\u5c0e\u5165\u3059\u308b<\/li>\n<\/ul>\n<p>\u5fc3\u69cb\u3048\u3084\u52c9\u5f37\u3082\u5927\u4e8b\u3067\u3059\u3002<\/p>\n<ul>\n<li>\u4fe1\u983c\u3067\u304d\u308b package \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3088\u3046\u5fc3\u304c\u3051\u308b<\/li>\n<li>\u8106\u5f31\u6027\u3084\u653b\u6483\u306e\u60c5\u5831\u306b\u76ee\u3092\u5149\u3089\u305b\u3001\u767a\u898b\u3055\u308c\u305f\u3089\u3059\u3050\u306b\u5bfe\u5fdc\u3059\u308b<\/li>\n<li>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u95a2\u3059\u308b\u66f8\u7c4d\u3092\u8aad\u3080<\/li>\n<\/ul>\n<p>restricted shell \u306f\u3042\u304f\u307e\u3067\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u306e 1 \u3064\u3067\u3059\u3002\u57fa\u672c\u7684\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u758e\u304b\u306b\u3057\u306a\u3044\u3088\u3046\u6c17\u3092\u3064\u3051\u307e\u3057\u3087\u3046\u3002<\/p>\n<h2 id=\"\u304a\u308f\u308a\u306b\">\u304a\u308f\u308a\u306b<\/h2>\n<p>\u3053\u306e\u8a18\u4e8b\u3067\u306f\u300crestricted shell\u300d\u3092\u7d39\u4ecb\u3057\u307e\u3057\u305f\u3002\u672c\u5f53\u306b\u305d\u306e\u3088\u3046\u306a\u7de9\u3044\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u3067\u5f79\u306b\u7acb\u3064\u306e\u304b\u3001\u7591\u554f\u306b\u611f\u3058\u308b\u4eba\u3082\u5c45\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u3002\u4e00\u65b9\u3067\u3001\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u8ffd\u52a0\u306e\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u3068\u8003\u3048\u308b\u3068\u3001\u9762\u767d\u3044\u4ed5\u7d44\u307f\u3067\u306f\u306a\u3044\u304b\u3068\u601d\u3063\u3066\u307e\u3059\u3002<\/p>\n<p>\u50d5\u81ea\u8eab\u307e\u30601\u9031\u9593\u3057\u304b\u4f7f\u3063\u3066\u306a\u3044\u306e\u3067\u3001\u672c\u5f53\u306b\u4f7f\u3048\u308b\u3082\u306e\u306a\u306e\u304b\u6b63\u76f4\u3088\u304f\u5206\u304b\u3063\u3066\u307e\u305b\u3093\u3002\u3057\u3070\u3089\u304f\u4f7f\u3063\u3066\u307f\u3066\u3001\u4f7f\u7528\u611f\u3092\u78ba\u304b\u3081\u305f\u3044\u3068\u601d\u3063\u3066\u307e\u3059\u3002\u305d\u306e\u3088\u3046\u306a\u611f\u3058\u3067\u3059\u304c\u3001\u3082\u3057\u8208\u5473\u3042\u308c\u3070\u4f7f\u3063\u305f\u308a\u3001\u53c2\u8003\u306b\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p><a target=\"_blank\" href=\"https:\/\/qiita.com\/advent-calendar\/2025\/hatena\">\u306f\u3066\u306a\u30a8\u30f3\u30b8\u30cb\u30a2 Advent Calendar 2025<\/a> 2\u65e5\u76ee\u306e\u62c5\u5f53\u306f <a target=\"_blank\" href=\"http:\/\/blog.hatena.ne.jp\/pokutuna\/\" class=\"hatena-id-icon\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.profile-image.st-hatena.com\/users\/pokutuna\/profile.png\" width=\"16\" height=\"16\" alt=\"\" class=\"hatena-id-icon\"\/>id:pokutuna<\/a> \u3055\u3093\u3067\u3059\u3002<\/p>\n<h2 id=\"\u5408\u308f\u305b\u3066\u8aad\u307f\u305f\u3044\">\u5408\u308f\u305b\u3066\u8aad\u307f\u305f\u3044<\/h2>\n<p><iframe src=\"https:\/\/hatenablog-parts.com\/embed?url=https%3A%2F%2Fwww.mizdra.net%2Fentry%2F2025%2F11%2F29%2F235449\" title=\"ghq+peco \u3068\u30b4\u30df\u7f6e\u304d\u5834 - mizdra's blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\" loading=\"lazy\"><\/iframe><cite class=\"hatena-citation\"><a target=\"_blank\" href=\"https:\/\/www.mizdra.net\/entry\/2025\/11\/29\/235449\">www.mizdra.net<\/a><\/cite><\/p>\n<\/div>\n<p><script>(function(d, s, id) {\n  var js, fjs = d.getElementsByTagName(s)[0];\n  if (d.getElementById(id)) return;\n  js = d.createElement(s); js.id = id;\n  js.src = \"\/\/connect.facebook.net\/ja_JP\/sdk.js#xfbml=1&appId=719729204785177&version=v17.0\";\n  fjs.parentNode.insertBefore(js, fjs);\n}(document, 'script', 'facebook-jssdk'));<\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805\">\u5143\u306e\u8a18\u4e8b\u3092\u78ba\u8a8d\u3059\u308b <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"\u3053\u308c\u306f \u306f\u3066\u306a\u30a8\u30f3\u30b8\u30cb\u30a2 Advent Calendar 2025 1\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002 \u306f\u3066\u306a\u3067\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u30a8\u30ad\u30b9\u30d1\u30fc\u30c8\u3092\u3057\u3066\u3044\u308b id:mizdra \u3067\u3059\u3002\u666e\u6bb5\u306f JavaScript \u3092\u66f8\u3044\u3066\u3066\u3001\u8da3\u5473\u3067\u8272\u3005\u306a\u30c4\u30fc\u30eb [&hellip;]","protected":false},"author":1,"featured_media":25975,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-25974","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hatena-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb - mizdra&#039;s blog - \u30dd\u30b1\u30b3\u30f3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805\" \/>\n<meta property=\"og:locale\" content=\"ja_JP\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb - mizdra&#039;s blog - \u30dd\u30b1\u30b3\u30f3\" \/>\n<meta property=\"og:description\" content=\"\u3053\u308c\u306f \u306f\u3066\u306a\u30a8\u30f3\u30b8\u30cb\u30a2 Advent Calendar 2025 1\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002 \u306f\u3066\u306a\u3067\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u30a8\u30ad\u30b9\u30d1\u30fc\u30c8\u3092\u3057\u3066\u3044\u308b id:mizdra \u3067\u3059\u3002\u666e\u6bb5\u306f JavaScript \u3092\u66f8\u3044\u3066\u3066\u3001\u8da3\u5473\u3067\u8272\u3005\u306a\u30c4\u30fc\u30eb [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805\" \/>\n<meta property=\"og:site_name\" content=\"\u30dd\u30b1\u30b3\u30f3\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-01T08:44:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pokecon.jp\/job\/wp-content\/uploads\/2025\/12\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1300\" \/>\n\t<meta property=\"og:image:height\" content=\"674\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"info@pokecon.jp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u57f7\u7b46\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"info@pokecon.jp\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u63a8\u5b9a\u8aad\u307f\u53d6\u308a\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"2\u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/25974\\\/\"},\"author\":{\"name\":\"info@pokecon.jp\",\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/#\\\/schema\\\/person\\\/16c9f07b1ba984d165d9aee259bda997\"},\"headline\":\"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb &#8211; mizdra&#8217;s blog\",\"datePublished\":\"2025-12-01T08:44:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/25974\\\/\"},\"wordCount\":165,\"image\":{\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png\",\"articleSection\":[\"\u306f\u3066\u306a\u30d6\u30ed\u30b0\"],\"inLanguage\":\"ja\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/25974\\\/\",\"url\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805\",\"name\":\"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb - mizdra's blog - \u30dd\u30b1\u30b3\u30f3\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png\",\"datePublished\":\"2025-12-01T08:44:27+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/#\\\/schema\\\/person\\\/16c9f07b1ba984d165d9aee259bda997\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#breadcrumb\"},\"inLanguage\":\"ja\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ja\",\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#primaryimage\",\"url\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png\",\"contentUrl\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png\",\"width\":1300,\"height\":674},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mizdra.net\\\/entry\\\/2025\\\/12\\\/01\\\/121805#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u30db\u30fc\u30e0\",\"item\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb &#8211; mizdra&#8217;s blog\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/#website\",\"url\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/\",\"name\":\"\u30dd\u30b1\u30b3\u30f3\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ja\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/#\\\/schema\\\/person\\\/16c9f07b1ba984d165d9aee259bda997\",\"name\":\"info@pokecon.jp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ja\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b0549cd9f7907c092ca5fbb283baf72337f235726e4b46fa39ec0b701ac2fe2?s=96&d=wavatar&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b0549cd9f7907c092ca5fbb283baf72337f235726e4b46fa39ec0b701ac2fe2?s=96&d=wavatar&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b0549cd9f7907c092ca5fbb283baf72337f235726e4b46fa39ec0b701ac2fe2?s=96&d=wavatar&r=g\",\"caption\":\"info@pokecon.jp\"},\"url\":\"https:\\\/\\\/pokecon.jp\\\/job\\\/author\\\/infopokecon-jp\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb - mizdra's blog - \u30dd\u30b1\u30b3\u30f3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805","og_locale":"ja_JP","og_type":"article","og_title":"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb - mizdra's blog - \u30dd\u30b1\u30b3\u30f3","og_description":"\u3053\u308c\u306f \u306f\u3066\u306a\u30a8\u30f3\u30b8\u30cb\u30a2 Advent Calendar 2025 1\u65e5\u76ee\u306e\u8a18\u4e8b\u3067\u3059\u3002 \u306f\u3066\u306a\u3067\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u30a8\u30ad\u30b9\u30d1\u30fc\u30c8\u3092\u3057\u3066\u3044\u308b id:mizdra \u3067\u3059\u3002\u666e\u6bb5\u306f JavaScript \u3092\u66f8\u3044\u3066\u3066\u3001\u8da3\u5473\u3067\u8272\u3005\u306a\u30c4\u30fc\u30eb [&hellip;]","og_url":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805","og_site_name":"\u30dd\u30b1\u30b3\u30f3","article_published_time":"2025-12-01T08:44:27+00:00","og_image":[{"width":1300,"height":674,"url":"https:\/\/pokecon.jp\/job\/wp-content\/uploads\/2025\/12\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png","type":"image\/png"}],"author":"info@pokecon.jp","twitter_card":"summary_large_image","twitter_misc":{"\u57f7\u7b46\u8005":"info@pokecon.jp","\u63a8\u5b9a\u8aad\u307f\u53d6\u308a\u6642\u9593":"2\u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#article","isPartOf":{"@id":"https:\/\/pokecon.jp\/job\/25974\/"},"author":{"name":"info@pokecon.jp","@id":"https:\/\/pokecon.jp\/job\/#\/schema\/person\/16c9f07b1ba984d165d9aee259bda997"},"headline":"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb &#8211; mizdra&#8217;s blog","datePublished":"2025-12-01T08:44:27+00:00","mainEntityOfPage":{"@id":"https:\/\/pokecon.jp\/job\/25974\/"},"wordCount":165,"image":{"@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#primaryimage"},"thumbnailUrl":"https:\/\/pokecon.jp\/job\/wp-content\/uploads\/2025\/12\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png","articleSection":["\u306f\u3066\u306a\u30d6\u30ed\u30b0"],"inLanguage":"ja"},{"@type":"WebPage","@id":"https:\/\/pokecon.jp\/job\/25974\/","url":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805","name":"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb - mizdra's blog - \u30dd\u30b1\u30b3\u30f3","isPartOf":{"@id":"https:\/\/pokecon.jp\/job\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#primaryimage"},"image":{"@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#primaryimage"},"thumbnailUrl":"https:\/\/pokecon.jp\/job\/wp-content\/uploads\/2025\/12\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png","datePublished":"2025-12-01T08:44:27+00:00","author":{"@id":"https:\/\/pokecon.jp\/job\/#\/schema\/person\/16c9f07b1ba984d165d9aee259bda997"},"breadcrumb":{"@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#breadcrumb"},"inLanguage":"ja","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805"]}]},{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#primaryimage","url":"https:\/\/pokecon.jp\/job\/wp-content\/uploads\/2025\/12\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png","contentUrl":"https:\/\/pokecon.jp\/job\/wp-content\/uploads\/2025\/12\/https3A2F2Fcdn-ak.f.st-hatena.com2Fimages2Ffotolife2Fm2Fmizdra2F202512012F20251201122018.pn.png","width":1300,"height":674},{"@type":"BreadcrumbList","@id":"https:\/\/www.mizdra.net\/entry\/2025\/12\/01\/121805#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u30db\u30fc\u30e0","item":"https:\/\/pokecon.jp\/job\/"},{"@type":"ListItem","position":2,"name":"\u666e\u6bb5\u4f7f\u3044\u3067\u304d\u308b\u4fdd\u8b77\u30ec\u30a4\u30e4\u30fc\u300crestricted shell\u300d\u306e\u7d39\u4ecb &#8211; mizdra&#8217;s blog"}]},{"@type":"WebSite","@id":"https:\/\/pokecon.jp\/job\/#website","url":"https:\/\/pokecon.jp\/job\/","name":"\u30dd\u30b1\u30b3\u30f3","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pokecon.jp\/job\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ja"},{"@type":"Person","@id":"https:\/\/pokecon.jp\/job\/#\/schema\/person\/16c9f07b1ba984d165d9aee259bda997","name":"info@pokecon.jp","image":{"@type":"ImageObject","inLanguage":"ja","@id":"https:\/\/secure.gravatar.com\/avatar\/2b0549cd9f7907c092ca5fbb283baf72337f235726e4b46fa39ec0b701ac2fe2?s=96&d=wavatar&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b0549cd9f7907c092ca5fbb283baf72337f235726e4b46fa39ec0b701ac2fe2?s=96&d=wavatar&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b0549cd9f7907c092ca5fbb283baf72337f235726e4b46fa39ec0b701ac2fe2?s=96&d=wavatar&r=g","caption":"info@pokecon.jp"},"url":"https:\/\/pokecon.jp\/job\/author\/infopokecon-jp\/"}]}},"_links":{"self":[{"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/posts\/25974","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/comments?post=25974"}],"version-history":[{"count":1,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/posts\/25974\/revisions"}],"predecessor-version":[{"id":25976,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/posts\/25974\/revisions\/25976"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/media\/25975"}],"wp:attachment":[{"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/media?parent=25974"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/categories?post=25974"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pokecon.jp\/job\/wp-json\/wp\/v2\/tags?post=25974"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}