core/exec-invoke: don't set $TMPDIR if sandboxing is disabled

Follow-up for 6156bec7a4
This commit is contained in:
Mike Yuan
2025-05-27 22:35:03 +02:00
parent c6b4f1c8f8
commit 8b0a0298b7

View File

@@ -2193,7 +2193,7 @@ static int build_environment(
}
assert(c->private_var_tmp >= 0 && c->private_var_tmp < _PRIVATE_TMP_MAX);
if (c->private_tmp != c->private_var_tmp) {
if (needs_sandboxing && c->private_tmp != c->private_var_tmp) {
assert(c->private_tmp == PRIVATE_TMP_DISCONNECTED);
assert(c->private_var_tmp == PRIVATE_TMP_NO);