Comment by nosioptar

SELinux is a great example of that end.

Of course, I know an embarrassing number of people that won't touch it because they're convinced it's an NSA backdoor into your system.