URL:
https://github.com/SSSD/sssd/pull/5867
Author: ikerexxe
Title: #5867: usertools: force local user for sssd process user
Action: opened
PR body:
"""
System hardening by forcing the sssd user to be loaded from a local database (/etc/passwd)
instead of using any remote user. This could happen in very special conditions and might
change the owner of the sssd databases and generate a denial of service.
Moreover, clarify user option in sssd.conf, as it accepts both the user name and the id as
input. The only constraint is that the user should be present in the local database
(/etc/passwd).
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/5867/head:pr5867
git checkout pr5867