_cfg_use_ selinux ".*FS_SECURITY SECURITY SECURITY_NETWORK SECURITY_SELINUX SECURITY_SELINUX_BOOTPARAM"
use selinux && KERNEL_CONFIG+=" AUDIT"
# for reeable SECURITY later
use selinux || KERNEL_CONFIG+=" -NETLABEL -IP6?_NF_SECURITY -INTEGRITY"