4 votes

SELinux's approach (restrict everything unless explicitly permitted) is the opposite of Linux's (permit everything unless explicitly forbidden). That makes setup different,