That is an example of a mandatory access control (MAC) framework[1]. SELinux[1] is a MAC for linux systems and is very effective if the user doesn't disable it due to frustrations over false positives or due to true positives that are viewed by the user as false.
OSX has discretionary access control, which can be configured to be a full MAC[3].
Starting in OS X v10.5, the kernel includes an implementation of the TrustedBSD Mandatory Access Control (MAC) framework. A formal requirements language suitable for third-party developer use was added in OS X v10.7. Mandatory access control, also known as sandboxing, is discussed in Sandboxing and the Mandatory Access Control Framework.[4]
There is MAC framework inside MacOS X kernel, but it's only for Apple usage. Developers arent' supposed to use it, because Apple states that it has no ABI stability and it can change unexpectedly from version to version. That is probably why it's not used by any commercial software (or it's so rare).
Instead, Apple designed a KAUTH framework, which is way more limited than MAC, but can be used to implement some features that will be stable across kernels (it has ABI stability). There are already some AVs that are using KAUTH.
OSX has discretionary access control, which can be configured to be a full MAC[3].
Starting in OS X v10.5, the kernel includes an implementation of the TrustedBSD Mandatory Access Control (MAC) framework. A formal requirements language suitable for third-party developer use was added in OS X v10.7. Mandatory access control, also known as sandboxing, is discussed in Sandboxing and the Mandatory Access Control Framework.[4]
[1] https://en.wikipedia.org/wiki/Mandatory_access_control
[2] https://en.wikipedia.org/wiki/Security-Enhanced_Linuxhttps:/...
[3] http://sysdev.me/trusted-bsd-in-osx/
[4] https://developer.apple.com/library/mac/documentation/Securi...