Namespace isolation

A form of isolation that limits which resources a container may interact with.