tweak and revert to permissive selinux kernel

Change-Id: I22b2fcf9c4cbc6723666009f33dce3a28bf82b90