Provides compatible declarations for modern file management functions
such as futimens or opening with the O_CLOEXEC flag

When creating a home directory, the destination tree can be modified in
various ways while it is being constructed because directory
permissions
are set before populating the directory. This can lead to file creation
and permission changes outside the target directory tree, using hard
links.

This security problem was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

The removal of a home directory is sensitive to concurrent modification
of the directory tree being removed and can unlink files outside the
directory tree.

This security issue was assigned CVE-2013-0219

https://fedorahosted.org/sssd/ticket/1782

sss_obfuscate: abort on ctrl+c

There is a python bug (http://bugs.python.org/issue11236) where
getpass.getpass() does not throw KeyboardInterrupt on ctrl+c. This
workaround is the closest we can get: if we detect the control
character in the string that we read, we'll cancel.

Make the domain argument mandatory in sss_obfuscate

It doesn't make sense to set a "default" domain. We should require
that the domain always be specified.

Gracefully handle permission errors in sss_obfuscate

Make SSSDConfig API configuration readable

Previously, only root could read these files, but it makes sense
to allow non-root users to prototype sssd.conf files.

removing password option functionality

Coverity 10082 and 100083

semanage_commit() returns -1 on error, and can return a positive
value on success.

https://bugzilla.redhat.com/show_bug.cgi?id=649037

Fixes: #585

A tool to add obfuscated passwords into the SSSD config file