- add selinux fix right after installing docker package on centos
- prevent setenforce failure
- set selinux permissive only when it needs to be
- fix selinux permissive check