[PATCH 5.15 066/371] selinux: ensure av_permissions.h is built when needed