URL: https://github.com/SSSD/sssd/pull/5268 Title: #5268: (WiP) proxy_child hardening
alexey-tikhonov commented: """ I discussed this with Sumit and it seems we actually can't put any restriction on names in `domains` option of `sssd.conf` (because it is not necessary a hostname, but can be any domain, and DNS itself doesn't place much restrictions on names).
So this PR only addresses issue as it was reported originally. """
See the full comment at https://github.com/SSSD/sssd/pull/5268#issuecomment-765473091