commit:     dbda37edb372557471ce7e062bcc0d6e7eea8a21
Author:     Benda Xu <heroxbd <AT> gentoo <DOT> org>
AuthorDate: Mon Oct 24 10:50:58 2016 +0000
Commit:     Benda XU <heroxbd <AT> gentoo <DOT> org>
CommitDate: Mon Oct 24 10:51:41 2016 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=dbda37ed

profiles/features/prefix/make.defaults: disable user* features.

 profiles/features/prefix/make.defaults | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/profiles/features/prefix/make.defaults 
b/profiles/features/prefix/make.defaults
index 68835e0..4de59fd 100644
--- a/profiles/features/prefix/make.defaults
+++ b/profiles/features/prefix/make.defaults
@@ -17,7 +17,11 @@ USE="-xattr"
 #
 # If in the future, there does exist a working sandbox implementation then it
 # should be enabled on a per-profile basis only.
-FEATURES="${FEATURES} -sandbox"
+FEATURES="${FEATURES} -sandbox -usersandbox"
+
+# Prefix does not have user management and the security model does not apply.
+# Disable user* features by default.
+FEATURES="${FEATURES} -userpriv -userfetch -usersync"
 
 # this probably already is like this, but we assure that in prefix we
 # have a GNU userland

Reply via email to