defconfig: set SELinux permissive using CMDLINE from kernel config