[Skunkworks] SELinux

It is a good thing to have i think its restrictions are unrealistic. For me it has gotten to a point where selinux is always the first thing i disable (permanently). Seems to me that active selinux and a *working* box are mutually exclusive. How do u guys configure it in a production environment?