It seems having XDG variables like XDG_CONFIG_HOME set in the environment when calling emerge has a tendency to cause sandbox violations. For example, see the bugs blocking bug 499202.
https://bugs.gentoo.org/show_bug.cgi?id=499202 If you grep for XDG_CONFIG_HOME in the eclass directory, you can see that several eclasses work around this by setting XDG_CONFIG_HOME="${T}" or "${T}/.config". gnome2-utils.eclass takes it a step further and creates empty directories for several other XDG variables. Is this something we can/should consolidate into some central place? Or should I just copy/paste something into distutils-r1.eclass?