s4-common: use permissive SELinux

Change-Id: I260a6262c179514d5bf4fcca6d48e671972aa7a8