add envsetup.sh for standalone kernel compile
defconfig: allow permissive selinux from boot param