1. A method of providing security in a computing system, comprising: receiving a request to create an isolated execution environment within a host environment controlled by an operating system executing on the computing system; creating the isolated execution environment within the host environment, wherein the isolated execution environment is isolated from the host environment; and applying a control group to the isolated execution environment, wherein the control group specifies hardware resources of the computing system that are accessible to the isolated execution environment.