Looks kind of like OpenBSD's pledge(2) and unveil(2).

I have used both and I personally think those calls are the best security mitigations in our field :)

I would love to see something as simple in Linux.