This genuinely surprised me - I much prefer SELinux to a number of other access control systems out there (looking at you, Active Directory). It sort of does t

This genuinely surprised me - I much prefer SELinux to a number of other access control systems out there (looking at you, Active Directory). It sort of does the work for you, as long as you 'train' it across a broad enough range of daily tasks. Of course, its not always appropriate to play it that way, but for personal use I've had no issues.