The access granted to guest code over host resources, such as environment variables and the file system.