> SELinux is a hammer that cannot be used to turn a default debian installation into a usable immutable linux distro. It's only a hammer if you use it as one.

> SELinux is a hammer that cannot be used to turn a default debian installation into a usable immutable linux distro. It's only a hammer if you use it as one. It's a very fine grained tool and it can be as precise as you want it to be. > The initial claim of "using SELinux rather than a dedicated distro can work" was nonsense It wasn't at all, and it's baffling to me why anyone would claim so.