[lima]

It should be possible to implement this using a LSM like Tomoyo or AppArmor.

[spikengineer]

Apparmor certainly has it. It also pretty easy in apparmor if the rules you want to set are permanent but I don't know if a dynamic api exists for apparmor.