kernel: add options needed for SELinux