From a156c597ffbe6518e572533e2785502f03eb64de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Th=C3=A9ophane=20Hufschmitt?=
 <theophane.hufschmitt@tweag.io>
Date: Tue, 9 Apr 2024 10:48:05 +0200
Subject: [PATCH] Add a release note for the build-dir hardening

(cherry picked from commit d99c868b0410d44faf547eb5ac923ea62abb649f)
---
 doc/manual/rl-next/harden-user-sandboxing.md | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 doc/manual/rl-next/harden-user-sandboxing.md

diff --git a/doc/manual/rl-next/harden-user-sandboxing.md b/doc/manual/rl-next/harden-user-sandboxing.md
new file mode 100644
index 000000000..fa3c49fc0
--- /dev/null
+++ b/doc/manual/rl-next/harden-user-sandboxing.md
@@ -0,0 +1,8 @@
+---
+synopsis: Harden the user sandboxing
+significance: significant
+issues:
+prs: <only provided once merged>
+---
+
+The build directory has been hardened against interference with the outside world by nesting it inside another directory owned by (and only readable by) the daemon user.