I've used both grsec and selinux, and I think selinux would be more appropriate here.
The main issue here is the initial volume of work required to get apps to actually work, this is something I may look at once I finally get my n900 ;-)

The main problem is that selinux (may be historical) adds a 10% overhead...