I made a post about that here [0]. I don't think anyone is seriously applying those to a desktop system. They are both based on the Linux Security Module subs

I made a post about that here [0]. I don't think anyone is seriously applying those to a desktop system. They are both based on the Linux Security Module subsystem; which is just too low level to be effective at desktop security. Essentially, they suffer from the same problem as traditional UNIX permissions: no one cares that the attacker cannot access system files. The user's bank account is in their home directory. [0] https://news.ycombinator.com/item?id=23155269 https://news.ycombinator.com/item?id=23155269