1. A method comprising: creating, by a processor, a first execution environment on a computing system to access untrusted content, wherein the first execution environment is isolated from a second execution environment running on the computing system, the second execution environment is isolated from the first execution environment, and wherein the first and the second execution environments are associated with a single security context to control access to resources of the computing system; creating, after the first execution environment is created, a temporary namespace for the first execution environment, wherein the temporary namespace comprises one or more temporary directories; copying the untrusted content to the temporary namespace for the first execution environment, wherein the untrusted content is accessed from the temporary namespace in the first execution environment; selecting after the first execution environment is created, a first security label for the first execution environment, wherein the first security label identifies a first set of policies for granting limited access to the resources of the computing system; selecting a second security label for the second execution environment, wherein the second security label identifies a second set of policies for granting the limited access to the resources of the computing system; binding a first communication socket to a first abstract name space associated with an operating system of the computing system with a first name that matches the first security label; binding a second communication socket to an additional abstract name space associated with the operating system of the computing system with a second name that matches the second security label; assigning the first security label to the first execution environment; assigning the second security label to the second execution environment; and upon completion of access of the untrusted content in the first execution environment, removing the first execution environment by deleting the temporary namespace for the first execution environment.