He&#x27;s actually talking about the SELinux&#x2F;&quot;RBAC in general&quot; approach. His only criticism of Grsecurity is that it&#x27;s not in the mainline and therefore not as effective as it could be.