tuna: defconfig: selinux permissive (for now)