It's nice to see one of the first things they did was to enable SELinux in Enforcing mode. I appreciate them leading by example. Perhaps they can document any

It's nice to see one of the first things they did was to enable SELinux in Enforcing mode. I appreciate them leading by example. Perhaps they can document any speed-bumps they ran into and document any custom rules they needed to create so that others can enable it on their instances.