1. An apparatus comprising: a first operating environment on a single data processing device configured to access an aircraft network data processing system on an aircraft, wherein the first operating environment comprises a first logical partition comprising an operating system; a second operating environment on the single data processing device configured to request access to the aircraft network data processing system, wherein the second operating environment comprises a second logical partition comprising a virtual machine; a network access controller on the first operating environment configured to control the access to the aircraft network data processing system by the second operating environment based on rules defining the access to the aircraft network data processing system; and a separation between the first operating environment and the second operating environment preventing the second operating environment from affecting the aircraft except when controlled by the network access controller.