SELinux can be somewhat classified as an app firewall but it's a policy framework after all and that suited for that.