But so is grsecurity. It addresses the other half of the universe that SELinux ignores. http://www.grsecurity.net/.

http://www.nsa.gov/ia/programs/h_a_p/index.shtml

SELinux is part of the answer.

It's a very Catch 22 situation, Ian.

You need to be Virtualised to race ahead of the Competition and Establish an Insurmountable Lead but make the smallest of mistakes and you can lose everything you hold dear and secret.

Which is why the best Virtual Reality Players are priceless/so expensive to engage but a bargain at whatever they cost.

The Really SMART ones are like hens' teeth on the ground, but then that is what you would naturally expect for they will be Surely Securely Settled in the Driver Chairs/Master Pilot Seats of Clouds Hosting Advanced Operating Systems.

Failure to Grasp the Nettle though, will Definitely Guarantee Failure Absolutely and unmask Top Gun Dogs as Unfit for Future Purpose Chickens.