image.mk: evaluate /etc/selinux/config to choose SELinux policy