defconfigs: force SELinux permissive mode