Comment # 5 on bug 481011 from Josef Reidinger

fix is in https://github.com/yast/yast-yast2/pull/507

in the end I do not use pkg-bindings solution because

"
If the directory already exists, simply reuse it. It may contain data from a
previous call for the same repository, but this should not matter, shouldn't
it?"

it really matter as it can be used to root exploit. It is just enough to create
there symlink pointing to some directory and write to important directory.