Re: SELinux is not the answer.
I am no SELinux expert, but isn't one of its problems that it can be configured badly, to the point of uselessness? Of course, "configure", "badly", and "uselessness" are all very subjective words, everyone has different requirements...
Doesn't BlackBerry's spin of Android run GR patches? If so, anyone know whether it has resisted exploits that have worked on other flavours of Android? Linus might not like the GR guys, but if their code is working then there must be some merit in it.