URL:
https://github.com/SSSD/sssd/pull/498
Title: #498: DESKPROFILE: Do not require CAP_DAC_OVERRIDE
lslebodn commented:
"""
Would you be so kind and could you firstly update design page.
ATM it is unclear who should have which access to the related directory.
Therefore it is difficult to say whether we can use this approach or need to use a
different solution.
BTW linked ticket already contains such suggestion:
```
it woudl be good to elaborate there more and specify who should have which access to files
(rw, ro, ...)
```
"""
See the full comment at
https://github.com/SSSD/sssd/pull/498#issuecomment-359419594