If this site wants to be effective, it should link to more than just a video. Don't make me sit and watch a video to get the most important ideas. Summarize the

If this site wants to be effective, it should link to more than just a video. Don't make me sit and watch a video to get the most important ideas. Summarize them at least! The reason people disable SELinux is that it leads to obscure hard to diagnose problems with equally obscure hard to research solutions. It has a reputation as a poorly documented, overly complex time sink. Its benefits are also a bit unclear. I know it "improves security" but some specifics are needed -- how, why, and what exactly does it do? What's an example of an attack that would succeed without SELinux and fail with it? Benefits should also be stated -- and with concrete examples and concrete use cases. There is way too much hand-wavey cargo cult "because security!" BS in infosec/netsec. By contrast, consider a security improvement like ASLR. Its benefits are easy to understand (if you know how stuff works under the hood), and it's very easy to enable and generally causes no problems. ASLR is a good example of a transparent, easy to use, and clearly beneficial security feature.