profiles/features/prefix/make.defaults: disable user* features.

diff --git a/profiles/features/prefix/make.defaults b/profiles/features/prefix/make.defaults
index 68835e0ac8983dcd7a3f69c6cf22323a30782ce0..4de59fda633c06887be26d91fed1672145484bae 100644 (file)
--- a/profiles/features/prefix/make.defaults
+++ b/profiles/features/prefix/make.defaults
@@ -17,7 +17,11 @@ USE="-xattr"
 #
 # If in the future, there does exist a working sandbox implementation then it
 # should be enabled on a per-profile basis only.
-FEATURES="${FEATURES} -sandbox"
+FEATURES="${FEATURES} -sandbox -usersandbox"
+
+# Prefix does not have user management and the security model does not apply.
+# Disable user* features by default.
+FEATURES="${FEATURES} -userpriv -userfetch -usersync"
 
 # this probably already is like this, but we assure that in prefix we
 # have a GNU userland