1. A system for restricting access to resources comprising: an operating system module adapted to serve a system processing environment, the system processing environment associated with a physical file system comprising a plurality of nodes representing files or directories and a restricted environment comprising a silo within the system processing environment, the silo associated with a silo-specific view of the physical file system, the view constraining access of a process executing in the silo to elements of the physical file system, wherein the operating system module is adapted to restricting access of the process executing in the silo to only those elements visible in the silo-specific view, wherein an element of the physical file system is identified via a numeric file identifier.