SELinux was developed primarily by NSA and I remember back in the day I had a distaste for using it just because of that fact. It was a huge code-base with hooks all over the place for various modules, just didnt sit right with security - minimize LOC and exposure. Instead I chose grsecurity and RBAC.
What is the opinion today, is SELinux preferred over alternatives such as Tomoyo?
What is the opinion today, is SELinux preferred over alternatives such as Tomoyo?