configs: set selinux permissive mode