vigor: use permissive SELinux