base-system pam Enable support for sys-process/audit When nousuid is enabled only su from the shadow package will be installed with the setuid bit (mainly for single user systems)