diff --git a/bin/ebuild.sh b/bin/ebuild.sh
index 42ca1fe..4b831ef 100755
--- a/bin/ebuild.sh
+++ b/bin/ebuild.sh
@@ -78,9 +78,6 @@
 
 [[ $PORTAGE_QUIET != "" ]] && export PORTAGE_QUIET
 
-# the sandbox is disabled by default except when overridden in the relevant stages
-export SANDBOX_ON="0"
-
 # sandbox support functions; defined prior to profile.bashrc srcing, since the profile might need to add a default exception (/usr/lib64/conftest fex)
 _sb_append_var() {
 	local _v=$1 ; shift
@@ -113,6 +110,9 @@
 	unset x
 fi
 
+# the sandbox is disabled by default except when overridden in the relevant stages
+export SANDBOX_ON=0
+
 lchown() {
 	chown -h "$@"
 }