I hate to make this more complicated, but if you test permissive, you should probably also test disabled.  Otherwise how can you know a broken permissive test should Fail?, if enforcing also blocks the action?  In other words, you must have:

* Test some action is blocked:
     * Enforcing blocks
     * Permissive allows
     * Disabled allows
* Some action is allowed:
     * Enforcing allows
     * Permissive allows
     * Disabled allows
* Some action is blocked outside SELinux (i.e. permissions):
     * Enabled blocks
     * Permissive blocks
     * Disabled blocks
* Some action is allowed outside SELinux (i.e. permissions):
     * Enabled allows
     * Permissive allows
     * Disabled allows

Or, you could just ignore this and make this test _only_ cover <code>selinux=enforcing</code> case.  This is probably simpler approach.