Expand description
Folders of this machine that a container is handed for one piece of work: the folder a login is taken out into, the folder a sign-in window leaves addresses in, the context an image is built from.
What passes through them can be the person’s own: a login is a token that signs in to their account. So a folder is the person’s alone (0700), under the session’s own runtime folder when there is one, and made fresh under a name nobody could have guessed: another user of the machine can neither read it nor put a folder of their own where QCode is about to write. It is taken away when its owner is done with it.
Structs§
- Scratch
- A private folder, removed with everything in it when this is dropped.