AppArmor set to be merged for 2.6.36

A home desktop is "easy". With easy i mean that you can configure till it meets your needs, you can reboot it if needed, hack, patch kernels/libs/apps and so on. After all it's a single machine and yours.

Now imagine you have 150+ servers to care. Different UNIX-es too although 90% Linux, but even 100% were Linux and the same distro the situations does not change much. You're not the only administrator of those machines and those provide different services, some others are virtual machines mostly hosted at a provider.

Yep, probably I'm getting OT but ... real life.
In this situation how would you manage to admin SELinux? I'm not trying to make a point, is just curiosity and wish to learn more.

For now for me, chmod and friends can let me have the job done without loosing my life caring on which function call that X machine i can allow for that Y user or such while the backlog of things to do grows on and on...

How do you people out there manage this situations? No, is not a rhetorical question, thanks in advance for the replays.