Title: #578: proxy: proxy_child hardening
I am not sure if you are still interested in this PR.
But if so:
1) please see comments I have left inline
2) don't you mind to update commit message please? It would be nice to have there
explanation why those changes are needed. Also I do not understand "The --domain
argument to be sanitized." part -- patch doesn't perform any arguments
See the full comment at https://github.com/SSSD/sssd/pull/578#issuecomment-541049225