export interface HomeWriteCtx {
    home: string;
    env: NodeJS.ProcessEnv;
    /** `policy.sandbox.homeWriteAllow`: relative to the home, or absolute. */
    allow: string[];
    /** Further paths that must stay really writable when they are under the home: the role's cwd,
     *  the org root, `policy.sandbox.allowWrite`, the temp directory. */
    writable?: Array<string | undefined>;
}
/** bubblewrap arguments that overlay `home` and bind the allowed paths back read-write. Entries
 *  that do not exist are skipped (they would have to be created, in the overlay); an entry that
 *  would reopen the whole home throws. */
export declare function homeWriteLayer(ctx: HomeWriteCtx): string[];
/** Whether this bubblewrap can mount a tmpfs overlay (`--tmp-overlay`, bubblewrap 0.11+, and a
 *  kernel that allows overlayfs in a user namespace). Probed once per process. */
export declare function homeLayerAvailability(): {
    available: boolean;
    reason?: string;
};
//# sourceMappingURL=home-write-deny.d.ts.map