For selinux, it works fine and it's all included (via bcm2709_selinux_config.patch). Be sure that your /boot/cmdline.txt doesn't disable it, and that /etc/sysconfig/selinux is correctly configured :-)
Not sure what happens: cmdline.txt has no reference to selinux at all.
the config should be OK: $ grep -v ^# /etc/selinux/config SELINUX=permissive SELINUXTYPE=targeted
It seems to start at boot time: $ dmesg |grep -i selinux [ 0.000657] SELinux: Initializing. [ 0.000705] SELinux: Starting in permissive mode [ 0.266061] SELinux: Registering netfilter hooks
But in the end it is disabled: $ getenforce Disabled
sorry about the noise. I did not notice that my test system was still in redsleeve6 mode. After booting redsleeve7 it is now happy relabeling.
Jacco