Comment by citrin_ru

SELinux is pain to maintain in more or less complex system. I more like approach taken by OpenBSD [1] but it requires code changes.

[1] https://man.openbsd.org/pledge.2