defconfig: add SELinux support