This looks like it would be an excellent addition to CyanogenMod. Also, for any CM users that might be lurking: Have any of you been able to get SEforAndroid (http://selinuxproject.org/page/SEAndroid) running? I haven't spent too much effort researching this, but would be very interested to hear some anecdotes/experiences.