[gentoo-user] NSA SELinux kernel support

[Alexander Kapshuk]

I was wondering if there was any harm in disabling the NSA SELinux support
in my gentoo-sources based kernel.

The kernel config help for the NSA SELinux options suggests that having
them enabled is optional.

If I understand it correctly, having these options on in the kernel config
alone does not imply that my system is using NSA SELinux. According to
http://wiki.gentoo.org/wiki/SELinux/Installation, a bunch of other things
needs to be taken care of to have SELinux on.

Is SElinux something that the folk here would recommend using on a
personal, rather than a production system? Or would you recommend using
something else, if anything at all?

Thanks.