Oh, try calling in for support on that $1+M CommercialDatabase(tm) installation and tell them SELinux is turned on, or any other similar super expensive softwar

Oh, try calling in for support on that $1+M CommercialDatabase(tm) installation and tell them SELinux is turned on, or any other similar super expensive software. The 1st line will happily tell you that the most prized data you were willing to pay huge amounts for can't be protected by something so .. easy as SELinux. They will not take your ticket until you turn it off and try again, and to your great surprise they will not be sharing their favourite selinux tagging configs with you. So in the end, what can be protected with a decent SElinux config will be that statically generated catblogs-r-us.io site you run, but not the company financial database. "Priority inversion", or something to that effect.