[tagrun]

> There are some great lesser alternatives like AppArmor, grsec,

Lesser? grsecurity is actually a far superior alternative to SELinux: https://grsecurity.net/compare.php

It's unfortunate that their stable patches are no longer available publicly: https://grsecurity.net/announce.php

[mcguire]

Well, unless you've been blocked from getting it by what's-his-name.