enable selinux and some tweaks