[anxiousest]

SELinux default policies are usually written per distribution, by their maintainers. It's widely used and peer reviewed (Fedora, Red Hat) I'd trust it over any less involved attempt at emulating it.