use selinux defconfig variant