The feeling you describe here is part of what led to the design of Sysdig Falco (http://www.sysdig.org/falco http://www.sysdig.org/falco). While certainly not a

The feeling you describe here is part of what led to the design of Sysdig Falco (http://www.sysdig.org/falco http://www.sysdig.org/falco). While certainly not a 1:1 SELinux replacement, our goal was to use a much simpler, understandable model for describing & monitoring security policies for linux hosts.