[mkesper]

We use SELinux at work. It's really a lot of work to check all requests whether they're legitimate or not.

[db48x]

No argument there. The one downside of any fine–grained security system is the work it takes to build and maintain the security policy.