upvote
AFAIK, no. SIP is for the whole system, period.

I think we could say AppArmor is more akin to TCC on macOS, though AppArmor would be much more flexible.

reply