Fixed SELinux check

- `grep -i -- SELINUX=#{escape(mode)} /etc/selinux/config` is hit.

```
#SELINUX=disabled
SELINUX=enforcing
```

`grep -i -- ^SELINUX=#{escape(mode)} /etc/selinux/config` would better.