In my personal opinion, SELinux is a rather poor design, and I find that it actively gets in the way of trying to do security well.