Maybe, but not necessarily. If a program's job is "elevate other program's privileges arbitrarily" your policy is gonna be pretty loose. Also, a lot of distros

Maybe, but not necessarily. If a program's job is "elevate other program's privileges arbitrarily" your policy is gonna be pretty loose. Also, a lot of distros don't run SELinux. It's not to say that SELinux wouldn't be helpful, it's just that ideally we'd not have these vulnerabilities to begin with.