This (SELinux) is why I started using RH-family OSs more and more, and one of a few reasons why I stick with it, even though Debian's minimalism is incredibly nice. I have a book (as yet unopened) on my desk about SELinux administration, but it's huge and CentOS, Fedora, RHEL, et al. Just Work (okay, with the occasional small tweak to policies or booleans).
Same here. I never want to go back to another distribution where all of the services on a system, including containers, are not segregated from one another by SELinux.
