misc: build hostapd, set SELINUX to passive