[COOK-760] using attribute to change selinux

http://tickets.opscode.com/browse/COOK-760

This simple modification maintains compatibility with the existing "selinux::permissive" setup, while introducing attribute based modification of the policy.