And the granularity is at a very high level; I gather few want to wade into the details of SELinux, and if I hadn't been exposed to the concepts for 30 years (sic, I started learning Multics in 1979) I probably would have just turned off SELinux when I was using Fedora last year.