&gt; large parts of grsec were basically a competitor to SELinux.<p>Why do you think so? RBAC is an optional part that requires extra configuration to even activate. There&#x27;s a lot of benefit in running grsec kernel with SELinux as MAC. These features neither depend on RBAC nor even use it.<p>It&#x27;s kind of like smack, selinux, apparmor, yama, etc. You can think some of them are broken&#x2F;worse than others. You&#x27;re not forced to use them.