90% of the places I've worked, it's either been turned off or blindly hammered with audit2allow until SELinux shuts up. Mostly because the "admins" are too laz

90% of the places I've worked, it's either been turned off or blindly hammered with audit2allow until SELinux shuts up. Mostly because the "admins" are too lazy to do things the right way (non-standard file paths, ports, etc) or create/change the actual required context/labels. I'll admit that like anything it can be cumbersome at first and frustrating to learn, but it is helpful.