Does Apple SIP allow you to change the configuration per app? I thought now, which is a big difference with SELinux or Apparmor.
replyAFAIK, no. SIP is for the whole system, period.
replyI think we could say AppArmor is more akin to TCC on macOS, though AppArmor would be much more flexible.