Grsec consists of a few systems. One of them is RBAC, which is an access control part for userspace applications. It works similar to selinux&#x2F;apparmor, but it&#x27;s not based on LSM interface (as far as I know, but feel free to correct me).<p>Compared to SELinux, RBAC misses some very specific features, like dbus calls filtering for example, but otherwise those 3 systems are fairly comparable. RBAC uses AppArmor approach of filtering based on paths rather than inodes&#x2F;attributes.<p>But grsec as a whole is much larger. It prevents way more attacks at kernel and userspace level than LSM implementations can see. <a href="https:&#x2F;&#x2F;grsecurity.net&#x2F;compare.php" rel="nofollow">https:&#x2F;&#x2F;grsecurity.net&#x2F;compare.php</a> should give you a general idea.<p>Also, there&#x27;s nothing preventing you from using selinux, apparmor, or something else with grsec kernel - they can still run together.