SELinux isn't Capability Based Security The closest you've likely ever been to capabilities is cash in a wallet. Each banknote is a capability, and you chose f

SELinux isn't Capability Based Security The closest you've likely ever been to capabilities is cash in a wallet. Each banknote is a capability, and you chose from those capabilities, in a secure and transparent manner at the time of transaction. SELinux, by analogy, requires your BANKER to decide what bills you're allowed to use in advance. SELinux sucks, and was likely a diversion to keep people away from capability based security. (As are the permission flags on your smartphone, etc)