Title: #5268: (WiP) proxy_child hardening
I will keep "changes requested" label to:
* investigate if DNS impose more strict reqs on the domain name
than what is currently stated in the man page (thank @sumit-bose for the hint)
This is tricky.
"Preferred name syntax"
"Host Names and Numbers"
If I read those ^^ docs correctly, conclusion is very much like:
The characters allowed in labels are a subset of the ASCII character set, consisting of
characters a through z,
A through Z, digits 0 through 9, and hyphen. This rule is known as the LDH rule (letters,
Domain names are interpreted in case-independent manner. Labels may not start or end with
This means 2 additional restrictions to the current statement in SSSD man page:
1) no "underscores"
2) labels may not start or end with a hyphen
(and also `dash` in the man page should be replaced with `hyphen`)
I think (2) is fine, but I'm somewhat worried with (1) - this probably might break
@sumit-bose , what would you think?
See the full comment at https://github.com/SSSD/sssd/pull/5268#issuecomment-764848735