Red Hat stops all upstream and downstream work on desktop Bluetooth, multimedia applications (namely totem, rhythmbox and sound-juicer) and libfprint/fprintd (hadess.net)
NSA SELinux is hard to configure/use. There was this exploit https://github.com/stealth/troubleshooter which some even called a backdoor rather than a vulnerability.
So what should I use instead? Nothing?
I guess maybe docker does isolation so I could run all my apps in there.