Regardless of how good it is. It won't be effective unless people can use it. Technically I'm
sure it's wonderful but the current situation with SELinux is that it's too complicated for
most people ( even good sysadmins ). It will probably always be too complicated, it was
designed that way and that's a design floor not easily fixed.
To me it looks like the anti-virus software you see on other platforms. It's a black box you
don't understand but are told you need. It's reactive security, rather than fix the
underlying problem, just fence it off. You are dependant on an external company for security
updates. If it messes with something you need to do, the only option (sometimes) is to
disable it.