Actually, the default Red Hat SELinux is exactly for preventing network vulnerabilities. Local users are unconfined. Example: your web application allows remot

Actually, the default Red Hat SELinux is exactly for preventing network vulnerabilities. Local users are unconfined. Example: your web application allows remote code execution. Even the default rules prevents most access (spawning a shell etc.) and generate lots of alerts.