 rule for the <TT>"writeFile"</TT> capability
    (see the <a href="policy.html#capabilities">list of capabilities</a>):
  </P>

  <PRE class=code>
    fun tempOnly path =
	case OS.Path.fromString (OS.Path.mkCanonical path) of
        | {isAbs=true, arcs="tmp"::_, ...} => Policy.ACCEPT path
        | {isAbs=false, arcs=[name], vol} =>  (*) redirect!
	     Policy.ACCEPT(OS.Path.toString{isAbs=true, arcs=["tmp",name], vol})
	| _ => Policy.REJECT

    do Policy.File.rule("writeFile", tempOnly)</PRE>

  <P>
   