--- id: multi-user/getownerhomediremail-ignores-its-argument title: "`getOwnerHomeDir(email)` ignores its argument" theme: multi-user status: open created: 2026-08-20 date_source: assumed order: 14 --- **`getOwnerHomeDir(email)` ignores its argument** whenever `HOME_DIR` is set, which it is here — every caller resolves to the owner's real login home. Safe only because all seven callers sit behind `execution` permissions. If per-user home confinement is ever attempted, this is the function to start from.