Android Lollipop uses SELinux to enforce policy. I had not heard that before. I got my first taste of SELinux via RHEL5 many years back, and I really liked it in theory, but it was a big hassle to get legacy software to work with it. But in a modern system like Android where apps already expect to be locked down, this makes a LOT of sense.