libGL tries to create /home/user.nv/ directory, after failing to mmap() /tmp/.gl* for execution

[VincasDargis]

I already discussed allowing ${HOME}/.nv as a trusted directory but our security expert said that leaves you open to an ‘escalation of privilege’ attack. So no trusted directories for us.

Yes, sure, but that’s still better path compared to /tmp that all system users can write to.

So if NVIDIA driver would try /.nv first, it would be a little better… manageable.