Created attachment 408386 [details, diff]
add usr/local to checked paths
Would be nice to catch unhandled buildsystem PREFIX=/usr/local defaults.
mgorny suggested to place the test inside
which I can agree. Users would still be able to write inside /usr/local using overlay ebuilds (for whatever reason).
dilfridge mentioned a coundcil debate about the security implications, rsync tree, no manifest.