> basically all modern distros shipping SELinux as default. No on ArchLinux, Gentoo, and apparently, not on Debian. I also remember that the default settings

> basically all modern distros shipping SELinux as default. No on ArchLinux, Gentoo, and apparently, not on Debian. I also remember that the default settings were not sane on older versions of Fedora (this may have since changed): sshd would get killed by selinux because of some "violation". I never managed to understand what it was, and since sshd is kind of critical, I disabled SELinux so I could be sure not to lose access to that machine. The added problem regarding SELinux is that most user's have no idea how it works, and there's no "short" explanation for it. Even after reading the entire wikipedia article, I'm left scratching my head wondering how it work or how one would use it. OTOH, file modes, for example , are explained in a single paragraph, and is something extremely easy to understand.