To limit Mobile Agent visiting on the local resources, making it seem to run in a particular box, operating environment (the host) can set on the Mobile Agent program, make it can only exert limited influence on local resources, but can not operate the local file system.