From 11a644a2f018fa820c8c1a9e1cb27fa965349d55 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Mon, 21 Sep 2026 18:02:02 +0200 Subject: [PATCH] contrib: rename "Safe Usage Guidelines" to "Security Best Practices" The "Safe Usage Guidelines" section is renamed to the more commonly used term "Security Best Practices" and two more recommendations are added. --- src/contrib/security-policy.rst | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/src/contrib/security-policy.rst b/src/contrib/security-policy.rst index 9667a49..d412a0f 100644 --- a/src/contrib/security-policy.rst +++ b/src/contrib/security-policy.rst @@ -112,13 +112,18 @@ Security Advisories Published advisories are available at: Red Hat CVE database: `https://access.redhat.com/security/security-updates/cve?q=sssd `_ -Safe Usage Guidelines -********************* +Security Best Practices +*********************** To use SSSD securely: - Keep updated: Always use supported versions - Always use encrypted connections and verify the server with e.g. TLS or SASL/GSSAPI + - When using TLS make sure the Certificate Authority (CA) certificates of your + system are well maintained or use a dedicate certificate bundle with only the + CA certificates needed by SSSD + - Do not use legacy encryption methods, if your system supports crypto + policies, use at least the default one Scope *****