What is SE Linux?

A system for MAC based on LSM

Uses features of role-based and domain-type access control

Tracks user identity through all operations (su, role and domain transition) and uses it to limit the available roles

Removes the power of root, I gave away the root password to my Cobalt Qube and no-one could cause any damage