1. A computer system for controlling access to certain files by processes, said computer system comprising: compartments implemented on an operating system; a database containing access rules, said access rules defining which compartments are authorized to access particular file resources; a kernel module for receiving a system call to access a file from a user space application belonging to a compartment; and a security module for determining whether said user space application is authorized to access said file utilizing access rules stored in said database.