URL:
https://github.com/SSSD/sssd/pull/183
Title: #183: More socket-activation fixes
lslebodn commented:
"""
I would prefer to remove `open_and_fchown_debug_file` from the last patch.
it requires more testing and root can write to any file. It will simplify testing.
and `open_and_fchown_debug_file` shoudl fix TOCTOU just for monitor non-root mode.
the patch should just remove `ExecStartPre=-/bin/chown root:root @logpath(a)/sssd_nss.log`
from sssd-nss.service
"""
See the full comment at
https://github.com/SSSD/sssd/pull/183#issuecomment-286737064