1. A computer-implemented method, comprising: maintaining a security policy for a process-based virtualization system; initializing a virtual machine (VM) in the process-based virtualization system; assigning a security label to the VM; and enforcing the security policy on the VM based on the security label of the VM in order to isolate the VM from other VM's in the process-based virtualization system.