Filesystem:/private/var

This folder is the mount point for, which is the device's user/data partition. This deviates from the Filesystem Hierarchy Standard which places this at, however, a sym-link is placed at   that redirects to here, so it is at least somewhat complient.

It is the larger of the two partitions, and stores all App Store applications, iTunes media, settings, photos, etc.

Before iPhone OS 1.1.3 (1.1.2 and below) all of this data was stored in /private/var/root. However, for security reasons, in 1.1.3 Apple made most applications run under the user mobile, and moved all of the data to /private/var/mobile.

Folders

 * audit (unused; iOS 6.0+?)
 * backups (unused)
 * cache (used by  and  )
 * db
 * ea (unused; iOS 6.0+?)
 * empty
 * folders (unused)
 * keybags (iOS 4.0+)
 * Keychains
 * lib
 * local
 * lock
 * log
 * logs (which contains /private/var/logs/AppleSupport)
 * Managed Preferences
 * mobile (home folder for mobile user)
 * MobileDevice
 * MobileSoftwareUpdate (used for OTA Updates; iOS 5.0+)
 * msgs
 * preferences
 * root (home folder for root user)
 * run (used by lockdownd)
 * spool(unused)
 * stash (created by Cydia)
 * tmp (/dev/disk0s3)
 * vm (unused as iOS doesn't support swap files or hibernation)
 * wireless (iOS 4.0+)

Files

 * kernel.log