 This rule does three things: (1) it freely allows opening files for writing
    in the <TT>/tmp</TT> directory, (2) it <EM>redirects</EM> files
    opened without specifying a directory to <TT>/tmp</TT>, and (3) it
    prohibits all other file write access. Note that it is important to make
    the path canonical, in order to avoid exploits with paths like
    <TT>/tmp/../home/user/</TT>.

    After setting this policy rule, our component
    above can be evaluated successfully, and leaves its message in t