URL:
https://github.com/SSSD/sssd/pull/5504
Title: #5504: limit process capabilities and sanitize usage of experimental
'--with-sssd-user=' option
pbrezina commented:
"""
Pushed PR:
https://github.com/SSSD/sssd/pull/5504
* `master`
* fd7ce7b3de9647eb6de75c3dd3974b44d860078e - systemd configs: add CAP_DAC_OVERRIDE in
case certain case
* ee9dbea1e67365ef1a48fff6bbf7cb4844c4b9ad - monitor: fixed default value of
'user' config option
* 9aaa0e51ddf556265b799d551e29a6eaccfea13e - systemd configs: limit process
capabilities
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5504#issuecomment-781942812