[viraptor]

With RBAC you effectively have to create your own policy for the whole system. I'm not aware of any successful projects providing a full, generic profile.

But ideally, you could be using Grsec without RBAC, but with SELinux.