ramfs: fix kernel config

- include a full but private busybox
- include a private "sh" shell
- run private shell with full SELinux privilege
Yank555.lu CM11-full v1.1b config