enable SELINUX
this was turned off indirectly with CONFIG_AUDIT