URL: https://github.com/SSSD/sssd/pull/5268 Title: #5268: proxy_child hardening
sumit-bose commented: """
I keep "changes requested" intentionally.
@sumit-bose , do we need to update `sssd/src/config/cfg_rules.ini` in this PR as well?
Hi,
yes, that sounds like a good idea. Ideal would be a single regular expression which would be used in both places, but currently I can only think of using replacements at configure time to achieve this which would make handling and reading `cfg_rules.ini` more difficult. So treating both separate would be ok imo.
bye, Sumit """
See the full comment at https://github.com/SSSD/sssd/pull/5268#issuecomment-672774896