selinux is the primary one that comes to mind, it definitely ticks the "fine-grained control" checkbox for sure