I loved the quote from Casey Schaufler, I always though I was mostly alone in my unhapiness with SELinux...
Can we agree at least that it's not perfect? For example, as someone put it in the lkml, the SELinux relabeling process is the new fsck (in fact, it's much worse - fsck is really fast these days), and the solutions I've heard about (http://lkml.org/lkml/2010/3/9/148) only seem workarounds to me...