SELinux

[Takehiko Abe]

 >> Likewise for people vehemently advocating to disable SELinux, I view
 >> them with a great deal of suspicion.  Is it simply they really do not
 >> like it, or do they have ulterior motives?
 >
 > Neither. Initially, when trying to use it, they typically notice
 > something stops working. Then, when trying to make it work, they get
 > lost in arcane and cryptic tools.

You forgot the crucial point. Namely that SELinux is not necessary
for most.

btw I don't know who "vehemently advocating to disable
SELinux". Rather it is "I don't need it" or its variations -- all very
smooth and mild like the Theodore Tso's comment I quoted in the first
place. I quote one more from the same thread. This one is from Linus:

     "I find SELinux to be so irrelevant to my usage that I don't use
      it at all"

http://lkml.org/lkml/2007/10/2/353