URL:
https://github.com/SSSD/sssd/pull/498
Title: #498: DESKPROFILE: Do not require CAP_DAC_OVERRIDE
simo5 commented:
"""
@fidencio fidencio I do not care for unprivileged mode when it makes things way harder
then they ought to be.
sssd can always make up a root account and escalate privileges anyway so running as a non
privileged user is not high on my list of things to make work, especially because it
simply can't for many tasks, making the software more complex (and thus buggier) for
no good reason.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/498#issuecomment-365925337