[UPDATE] put selinux in permissive mode by default

As discussed on the mailing list.