config.mk

use/control:
	@$(call add_feature)
	@$(call add,THE_PACKAGES,control)
	@$(call xport,CONTROL)

# some presets
use/control/sudo-su: use/control
	@$(call add,CONTROL,su:public sudo:public)

# recommended by ldv@ ;-)
# note that:
# - sshd-allow-groups results in "AllowGroups wheel users"
# - unprivileged su is used to drop privileges, not gain those
use/control/server/ldv: use/control
	@$(call add,CONTROL,mount:unprivileged)
	@$(call add,CONTROL,passwdqc-enforce:everyone)
	@$(call add,CONTROL,ping:netadmin)
	@$(call add,CONTROL,ping6:restricted)
	@$(call add,CONTROL,postqueue:mailadm)
	@$(call add,CONTROL,sftp:disabled)
	@$(call add,CONTROL,sshd-allow-groups:enabled)
	@$(call add,CONTROL,sshd-password-auth:disabled)
	@$(call add,CONTROL,su:restricted)