Write locations for apps

Apps must not write to arbitrary locations in the filesystem. All write operations are restricted to the designated app-specific directories for persistent and temporary data, as defined in File and data storage .

This restriction is required to support the upcoming process separation changes, where app processes will run under a dedicated process group with restricted access permissions to the file system.