Data Caging

Data caging means that different applications are allowed to access only particular data areas. This prevents applications from accessing the private data of other applications.

There are restricted file storage areas for system, private, and resource data.

The following list describes where different file types are stored on a mobile device:

• The \sys\bin folder contains all binaries. This is the only folder from where an application can be launched.

  Note: An application cannot read (or write) anything under the \sys\ folder without AllFiles (or TCB) capability.

• The private (\private\) folder includes folders for all applications. The <application SID>\ subfolders are application-specific and applications can access only their own folders. An application with AllFiles capability can access all private directories.

  The directory name under \private is determined by the SecureId (SID) of the application. If an SID is not specified, the UID3 provided in the mmp file is used.

• The resource folder (\resource\apps\) is used for resource files of applications. This data can be icons, bitmaps, and other material useful for all the applications. Read access is allowed by all applications, write access only by processes with the AllFiles capability.

For more information, see the File locations page in the Symbian OS Library.