Does Apple SIP allow you to change the configuration per app? I thought now, which is a big difference with SELinux or Apparmor.
AFAIK, no. SIP is for the whole system, period.
I think we could say AppArmor is more akin to TCC on macOS, though AppArmor would be much more flexible.
AFAIK, no. SIP is for the whole system, period.
I think we could say AppArmor is more akin to TCC on macOS, though AppArmor would be much more flexible.