1. A method, comprising: providing, by a computer system to a virtual system, first access control data associated with a regular computer file that corresponds to a resource on the computer system, the first access control data required for the virtual system to permit access to the regular computer file; receiving, at the computer system, a direct read from or direct write to one or more sectors of the resource represented by the regular computer file from the virtual system; hiding, at the computer system, a hidden computer file from the virtual system; and routing, at the computer system, the direct read from or direct write to the hidden computer file on the computer system.