At my last gig we enabled SELinux as part of our PCI security procedures, I highly recommend it but be aware that there is a fairly big ramp up. It pretty much

At my last gig we enabled SELinux as part of our PCI security procedures, I highly recommend it but be aware that there is a fairly big ramp up. It pretty much doubles the effort for most sysadmin tasks, even simple things like tweaking a server setting become multi-step processes. In my case, it was part of the reason I switched the team from DevOps only and brought in a real sysadmin.