armani: selinux permissive?