[PATCH 6.2 123/663] selinux: ensure av_permissions.h is built when needed