If you call secure an OS which can crash process without giving meaningful errors.<p>I have lost hours debugging mysterious crashes because of SELinux, and it is really not safe to have components unexpectedly crashing when they are part of your core infra.<p>Plus I guess that like <i></i>every security<i></i> frameworks it runs with priviledge, it has a lot of lines of code, is hard to audit, and thus highers the surface of vulnerability.<p>Hint: they use for instance strcmp a lot <a href="http:&#x2F;&#x2F;stackoverflow.com&#x2F;questions&#x2F;24353504&#x2F;whats-wrong-with-strcmp" rel="nofollow">http:&#x2F;&#x2F;stackoverflow.com&#x2F;questions&#x2F;24353504&#x2F;whats-wrong-with...</a><p>Their code mixes if(){} with the if() else (without braces)<p>They are sometimes using enums, sometimes #define sometimes magic values to refer to constant values.<p>You should really read the source code.<p>Definitively above the average of C code in the wild, still having well known code smell.<p>I would like to see if PVS studio could confirm my intuition.<p><a href="https:&#x2F;&#x2F;git.kernel.org&#x2F;cgit&#x2F;linux&#x2F;kernel&#x2F;git&#x2F;torvalds&#x2F;linux.git&#x2F;tree&#x2F;security&#x2F;selinux&#x2F;hooks.c?id=refs&#x2F;tags&#x2F;v4.5-rc5" rel="nofollow">https:&#x2F;&#x2F;git.kernel.org&#x2F;cgit&#x2F;linux&#x2F;kernel&#x2F;git&#x2F;torvalds&#x2F;linux....</a>